Data protection
Safeguarding personal and sensitive data against loss, misuse and unauthorised access, as required by privacy and security laws.
Overview
Data protection combines legal requirements, such as lawful processing and data subject rights, with security controls such as encryption, access management and monitoring.
It connects most directly to Privacy, Cybersecurity and GDPR.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Data protection failures lead to fines, litigation and lost trust.
Who it affects
Any organisation holding personal data.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Data protection. Select one to open it.
What to do about it
- 1Define the owner, frequency, data and pass condition.
- 2Automate the test on source data where you can.
- 3Capture evidence on every run, including exceptions.
- 4Review exceptions and failures and record the decision.
From requirement to evidence.
Data protection controls are mapped across privacy and cybersecurity regimes at once.
Request early access →