Data security refers to the protection of data against loss, manipulation and unauthorised access through technical and organisational measures.
Protection goals
The classic protection goals are confidentiality, integrity and availability. The GDPR adds the resilience of systems and the ability to restore data quickly after an incident.
Unlike data protection, data security covers all data, including trade secrets or technical data that does not relate to a person.
Implementation in practice
The appropriate level of protection depends on the risk, the state of the art and the costs of implementation. Established frameworks are ISO/IEC 27001 and the BSI's IT-Grundschutz.
Legal provisions
- Art. 5(1)(f) GDPR
- Principle of integrity and confidentiality.
- Art. 32 GDPR
- Security of processing.
- Art. 24 GDPR
- Responsibility for appropriate measures.
Related terms.
Technical and organisational measures (TOMs) Technical and organisational measures are the specific precautions a company takes to protect personal data. Art. 32 GDPR 
Encryption Encryption is the conversion of data by means of a key into a form that can only be read again with the matching key. Art. 32(1)(a) GDPR Data protection Data protection is the protection of natural persons with regard to the processing of their personal data. Art. 8 EU Charter of Fundamental Rights Data access control Data access control ensures that authorised persons can only access the data they need for their tasks. Art. 32(1)(b) GDPR
All terms from A to Z Encryption Encryption is the conversion of data by means of a key into a form that can only be read again with the matching key. Art. 32(1)(a) GDPR Data protection Data protection is the protection of natural persons with regard to the processing of their personal data. Art. 8 EU Charter of Fundamental Rights Data access control Data access control ensures that authorised persons can only access the data they need for their tasks. Art. 32(1)(b) GDPR 