What's the diff between Data Privacy and Data Security?

Privacy does not equal security. Let's take a minute and have a byte to snack on.??

Data security is important; we all want our data secure. And yet it often gets conflated with data privacy. I have spent the last 2+ years designing user experiences for data privacy. Perhaps this framing will untangle it.

A guilty pleasure of mine — I love me some '80s power ballads. And I want to keep this (personal) information (data) private.

I do need all the power ballads, so I want all the power ballad suggestions. To do that best, apps need my name, email, credit card information (cause who wants the ads), and address — all the information that tells the company I am the Rahshia that I say I am.?

They need to keep that data secure.?

Once a company knows I am, in fact me, security checked. Next starts the relationship building. Just as in any relationship, it is a two-way street. I set my preferences to find and collect all lighter-waving songs. The application learns (and saves) what I like to make other air-drumming suggestions.

Data security keeps safe the bits of data that, when combined, could enable a bad actor to identify me as Rahshia.?

Data privacy is the record of my personal preferences, patterns, and usage that, when combined, enable inferences to be made about Rahshia.?

So privacy does not equal security, and I want both. I want my data secured, and I also want to control how public my personal activities are and if it's shared with other companies.