Data Protection

Data Protection

In today's world, almost everything we do leaves a digital trace. Data protection is the practice of keeping this digital information safe, especially when it comes to your personal privacy. The core idea is simple: your private information should stay private, and only you — or people you trust — should be able to see or use it.

What is Sensitive Data?

Not all data is equally important. Some pieces of information, if they fall into the wrong hands, can cause real harm. This kind of information is called sensitive data. The textbook defines it as data that, if breached or compromised, can cause:

• Substantial harm (like financial loss)
• Embarrassment (like leaked private photos)
• Inconvenience (like having to cancel all your credit cards)
• Unfairness (like being denied a job because of your health records)

Examples of sensitive data include:

• Biometric information — your fingerprints, iris scans, or face-recognition data
• Health information — medical reports, prescriptions, or hospital records
• Financial information — bank account numbers, credit card details, or tax records
• Personal documents — Aadhaar card, passport, or driver's licence
• Personal media — private images, audio recordings, or videos

How is Sensitive Data Protected?

Privacy of sensitive data is not automatic — it has to be actively implemented. The textbook lists three main methods used to protect it:

• Encryption — scrambling the data so that only someone with the correct key can read it
• Authentication — verifying that the person trying to access the data is who they claim to be (e.g., passwords, OTPs, biometrics)
• Other secure methods — this includes things like firewalls, access controls, and secure storage

The goal of all these methods is to ensure that sensitive data is accessible only to the authorised user and only for a legitimate purpose.

Data Protection Laws

Different countries have different rules about how data should be handled. These rules are called data protection policies or data protection laws. They are legal documents that provide guidelines on three key aspects of sensitive information:

| Aspect | What it covers |

|--------|----------------| …