Which statement about data privacy is accurate?

Which statement about data privacy is accurate?

• A. Data privacy is achieved solely by antivirus software.
• B. Security staff should not be involved in privacy.
• C. Security staff support data privacy by enforcing access controls, providing training, and monitoring for policy compliance.
• D. Data privacy has no relation to security operations.

Answer: (C)

Data privacy is protected by more than just technology; it hinges on who can access data, how data is used, and how it’s monitored and governed. The best statement recognizes that security staff support data privacy by enforcing access controls so only authorized individuals can view or modify data, providing training so people understand their responsibilities and proper handling of sensitive information, and monitoring for policy compliance to detect violations and respond to incidents. Antivirus software focuses on stopping malware, not on controlling access or ensuring proper data handling, so it alone cannot guarantee privacy. Privacy requires ongoing oversight, governance, and processes, all of which fall under security operations, making the involvement of security staff essential.

Data privacy is protected by more than just technology; it hinges on who can access data, how data is used, and how it’s monitored and governed. The best statement recognizes that security staff support data privacy by enforcing access controls so only authorized individuals can view or modify data, providing training so people understand their responsibilities and proper handling of sensitive information, and monitoring for policy compliance to detect violations and respond to incidents. Antivirus software focuses on stopping malware, not on controlling access or ensuring proper data handling, so it alone cannot guarantee privacy. Privacy requires ongoing oversight, governance, and processes, all of which fall under security operations, making the involvement of security staff essential.