Principle (f): Integrity and confidentiality (security) (2024)

FAQs

Principle (f): Integrity and confidentiality (security)? ›

Integrity and Confidentiality: Personal data should be processed in a manner that ensures appropriate security and confidentiality of the personal data, including protection against unauthorised or unlawful access to or use of personal data and the equipment used for the processing and against accidental loss, ...

Principle (f): Integrity and confidentiality (security)

You must ensure that you have appropriate security measures in place to protect the personal data you hold. This is the 'integrity and confidentiality' principle of the GDPR – also known as the security principle.

Confidentiality measures are designed to prevent unauthorized disclosure of information. The purpose of the confidentiality principle is to keep personal information private and to ensure that it is visible and accessible only to those individuals who own it or need it to perform their organizational functions.

Integrity is the ability to ensure that a system and its data has not suffered unauthorized modification. Integrity protection protects not only data, but also operating systems, applications and hardware from being altered by unauthorized individuals.

In this context, confidentiality is a set of high-level rules that limits access to all types of data and information. Integrity is the assurance that the information is trustworthy and accurate. And availability is a form of risk management to guarantee reliable access to that information by authorized people.

These are examples of how you can show integrity in everyday situations: When someone shares secrets or confidential information with you, refrain from sharing it with anyone else. Ensure you're honest with your team members and supervisor. Don't engage in gossip about others.

Put simply, confidentiality is limiting data access, integrity is ensuring your data is accurate, and availability is making sure it is accessible to those who need it. This triad can be used as a foundation to develop strong information security policies.

Integrity involves making sure your data is trustworthy and free from tampering. The integrity of your data is maintained only if the data is authentic, accurate, and reliable. For example, if your company provides information about senior managers on your website, this information needs to have integrity.

For example, confidentiality could be applied to the protection of sensitive documents or trade secrets, integrity to the accuracy and completeness of physical records, and availability to ensuring that facilities and equipment are operational and accessible.

In these examples, data confidentiality measures, such as encryption, access controls, data masking, and strict policies, play a crucial role in safeguarding sensitive information from unauthorized access or disclosure, thereby preserving data integrity and maintaining trust with stakeholders.

What is an example to show authentication confidentiality and integrity? ›

The two-factor authentication (debit card with the PIN code) provides confidentiality before authorizing access to sensitive data. The ATM and bank software ensure data integrity by maintaining all transfer and withdrawal records made via the ATM in the user's bank accounting.

Confidentiality and integrity are closely related, as encryption not only provides confidentiality but also contributes to integrity by ensuring data remains unchanged during transmission. Authentication enhances confidentiality and integrity by ensuring that only authorized users can access and modify information.

Integrity is the quality of being honest and showing a consistent and uncompromising adherence to strong moral and ethical principles and values. In ethics, integrity is regarded as the honesty and truthfulness or earnestness of one's actions. Integrity can stand in opposition to hypocrisy.

Integrity: Be honest and straightforward in all professional and business relationships. Objectivity: Avoid the impact of biases, conflict of interest, undue influence, or reliance on others or technology on your professional or business judgement and decision-making.

The CIA Triad—Confidentiality, Integrity, and Availability—is a guiding model in information security. A comprehensive information security strategy includes policies and security controls that minimize threats to these three crucial components.

Integrity in cyber security refers to the methods of ensuring that data is accurate, real, and safeguarded from unauthorised user modification or destruction. Data integrity also refers to the accuracy and validity of data over its entire lifecycle.