Skip to main content

Data Privacy

Data Privacy is the right to keep personal and sensitive data secure from unauthorized or illegal access, modification, disclosure or destruction. This capability emphasizes implementing policies, systems and procedures that ensure data integrity, confidentiality and availability, thereby maintaining trust and confidence in the organization's information security function.

Level 1: Emerging

At an emerging level, you are developing an understanding of data privacy principles in Information Security. You are capable of identifying potential privacy risks and applying basic protective measures.

Level 2: Proficient

At a proficient level you are able to effectively implement and maintain data privacy controls, ensuring compliance with relevant laws and regulations while protecting sensitive information from unauthorized access or disclosure.

Level 3: Advanced

At an advanced level you are able to effectively implement and maintain data privacy policies and practices, ensuring compliance with regulations and protecting confidential information from unauthorized access, use, or disclosure.

Where is this capability used?