Towards a triad for data privacy

Abstract

Data privacy is a topic of interest for researchers, data collection managers, and data system specialists. To assuage growing concerns regarding the collection and use of personal data, many organizations have begun developing systems and drafting policies meant to safeguard that data from potential privacy harms. This paper provides a surface-level comparison of data privacy triads from NIST in the United States and ULD in Germany that may form the basis for a future universal definition of data privacy. The analysis shows two different approaches for defining data privacy: one which focuses on the practical implementation of data privacy safeguards (NIST) and one that focuses on defining the highest possible standards to which data processors must be held (ULD).