Skip to content

Data Protection

What is Data Protection?

The set of strategies and processes used to secure the privacy, availability, and integrity of data throughout its lifecycle.

Information Security

Each of these is named in at least one of the same controls as data protection. The number is how many controls name both.

What the standards actually require on data protection

Requirements naming data protection across 6 standards, quoted from the control text.

All public and private organisations in Nigeria that control data of natural persons had to make their data protection policies available to the public within three months of the Regulation's issuance (by 25 April 2019), in conformity with the Regulation.

nigeria-data-protection-regulation-ndpr::4.1(1) · Publish a data protection policy within three months of the Regulation →

Personal data processed for a law enforcement purpose must be adequate, relevant and not excessive in relation to that purpose.

uk-data-protection-act-2018::s.37 · Section 37 The third data protection principle: adequate, relevant and not excessive →

The controller must report to the Authority, and keep up to date, for each database or processing: its identification; the name, legal address and contact details of controller and processor; the characteristics and purpose of the processing;

ley-org-nica-de-protecci-n-de-datos-personales-lopdp::51 · Art. 51 and RGLOPDP Arts. 84 to 86: reporting to the National Register of Personal Data Protection →
GDPR13 controls

Ensure the data protection officer is involved, properly and in a timely manner, in all issues which relate to the protection of personal data.

GDPR-Art.38 · Position of the data protection officer →

The controller makes sure it is able to take in reports, in confidence, of breaches of data protection law within its area of responsibility.

germany-federal-data-protection-act-bdsg::s77 · s 77 Be able to receive confidential reports of data protection violations →

Questions people ask about data protection

What is Data Protection?
The set of strategies and processes used to secure the privacy, availability, and integrity of data throughout its lifecycle.
Why is Data Protection important for compliance?
Data Protection is a key concept in Information Security. Understanding data protection helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Data Protection?
Data Protection appears in the requirement text of Jamaica Data Protection Act 2020, Nigeria Data Protection Regulation (NDPR), UK Data Protection Act 2018, Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP), GDPR. Across these standards we have identified 86 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Protection?
Explore our compliance framework pages to see how data protection applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Data Protection applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.