Data privacy is the set of principles, practices, rights and controls concerned with how information relating to people is collected, used, stored, shared, retained and deleted. Privacy is concerned particularly with appropriate handling of personal information and with the relationship between individuals and organisations that process information about them. It includes questions about purpose, transparency, choice, necessity, proportionality, access, correction, retention and disclosure.
Data privacy is distinct from data security: privacy concerns whether information is collected and used appropriately, while security concerns protecting information and systems against threats. The two overlap substantially because strong security is often necessary to fulfil privacy obligations, but a perfectly secure system could still process personal data in ways that are inappropriate or unlawful.
Privacy has both ethical and legal dimensions. At an ethical level, individuals may reasonably expect information about them to be handled in ways consistent with the context in which it was provided. At a legal level, different jurisdictions impose specific requirements on organisations that process personal information. In the United Kingdom, the UK GDPR and the Data Protection Act 2018 form major parts of the data-protection framework, while other jurisdictions have their own laws and definitions.
Privacy requirements can differ according to the type of information, purpose of processing, role of the organisation, location of individuals and organisations, and applicable sectoral rules. Consequently, privacy should not be reduced to a generic rule that all personal information must simply be kept secret.
A fundamental privacy principle is purpose limitation: personal information should be collected and used for specified, explicit and legitimate purposes rather than being treated as unrestricted organisational property. Data minimisation is closely related and concerns limiting collection and processing to information that is necessary or relevant for the intended purpose. Storage limitation concerns retaining personal information only for as long as justified by the relevant purpose or legal requirement. Transparency requires people to receive appropriate information about how their data is processed. These principles influence system design, database schemas, application forms, analytics pipelines, logging practices and retention policies. Privacy therefore affects architecture and operations rather than existing solely in legal documents.
Consent is one possible basis for processing personal data in some legal frameworks, but privacy law is not universally based on consent. Under the UK GDPR, for example, lawful bases can include consent, contract, legal obligation, vital interests, public task and legitimate interests, depending on the circumstances and applicable requirements. Consent must satisfy specific conditions and is not automatically valid simply because a user clicks a button.
Organisations should distinguish consent from acceptance of general terms and from necessary processing required to provide a service. The appropriate legal basis depends on the actual processing activity. Privacy governance therefore requires understanding why data is processed, what legal framework applies and what rights and obligations follow from that basis.
Data-subject rights are an important aspect of privacy regulation. Depending on the applicable law and circumstances, individuals may have rights involving access to their personal data, correction of inaccurate information, deletion, restriction of processing, objection, data portability and safeguards concerning certain automated decisions. These rights are not always absolute and may be subject to exceptions. Organisations therefore need processes for identifying requests, verifying identity appropriately, locating relevant data across systems, assessing applicable exemptions and responding within required periods. Technical architecture can make these processes easier or harder. Centralised identity systems, metadata, data lineage and well-defined retention structures can improve an organisation's ability to locate and manage personal information.
Privacy by design and by default refers to incorporating privacy considerations into systems and processes from the beginning rather than treating them as an afterthought. Practical measures can include collecting only necessary fields, applying access controls, pseudonymising data, encrypting information, separating identifiers from analytical attributes, limiting retention and providing clear privacy notices. Privacy impact or data-protection impact assessments may be appropriate for processing that presents significant risks to individuals. Pseudonymisation reduces the direct association between records and identities but does not necessarily make information anonymous. Anonymisation requires a substantially stronger result because information that can still reasonably be linked back to an individual may remain personal data.
Data privacy has important relationships with security, confidentiality, anonymity and data protection. Confidentiality is a security property concerned with preventing unauthorised disclosure, whereas privacy also concerns authorised processing and appropriate purposes. Anonymity means that an individual's identity is not known or cannot reasonably be associated with the data, while pseudonymisation replaces direct identifiers with pseudonyms but may preserve the ability to reconnect records. Data protection is a broader legal and organisational concept encompassing privacy-related obligations and controls. Privacy can also be affected by inference: an organisation may derive sensitive information from seemingly innocuous datasets, meaning privacy risk cannot always be assessed by looking only at explicitly collected fields.
Privacy protection is technically challenging because personal information can be copied into backups, logs, analytics platforms, data lakes, third-party services and derived datasets. Removing a record from one database does not necessarily remove every copy or inference derived from it. Organisations therefore need lifecycle management, data inventories, retention controls, access reviews, secure deletion procedures and supplier governance.
Privacy also interacts with modern technologies such as artificial intelligence, profiling, behavioural analytics and large-scale data integration, where combining datasets can reveal information not obvious in individual sources. Effective privacy practice requires a combination of legal analysis, organisational policy, system design, security engineering, data governance and ongoing monitoring rather than reliance on a single technical control.
