Title: Data Security Author: Kriko Published: May 25, 2023 Last modified: Jul 7, 2026 --- 1. [Home](https://kriko.io/) / 2. [Glossary](https://kriko.io/glossary) / 3. D Letter # Data Security **[Data](https://kriko.io/services/data-analysis-insight) security** refers to the protection of [data](https://kriko.io/services/data-analysis-insight) against risks such as unauthorised access, use, modification, disclosure, loss or destruction. Its primary objective is to preserve the confidentiality, integrity and availability of information. Confidentiality limits access to authorised users, integrity protects information from improper alteration, and availability ensures that [data](https://kriko.io/services/data-analysis-insight) can be accessed reliably when required. This approach requires both technical and administrative measures against risks such as ransomware, [data](https://kriko.io/services/data-analysis-insight) theft, system failures and human error. [Data](https://kriko.io/services/data-analysis-insight) security is not limited to personal information. Customer names, telephone numbers, identity details, payment records, survey results and employee information must be protected, along with corporate financial records, trade secrets and intellectual property. Certain information involving beliefs, health or sexual life may create greater risks and therefore require stronger protection. Türkiye's [data](https://kriko.io/services/data-analysis-insight) protection authority also states that special categories of personal [data](https://kriko.io/services/data-analysis-insight) must receive stricter protection than ordinary personal information. [Data](https://kriko.io/services/data-analysis-insight) may be divided into categories such as qualitative and quantitative information. Occupation, colour and vehicle brand are categorical variables, while age, height and weight are quantitative variables. Categorical [data](https://kriko.io/services/data-analysis-insight) may also be divided into nominal variables without a defined order and ordinal variables that follow a meaningful ranking. From a security perspective, however, information should primarily be classified according to its purpose, sensitivity and the potential consequences of unauthorised access. [Data](https://kriko.io/services/data-analysis-insight) security may be supported through access controls, multi-factor authentication, encryption, backups, network protection and regular security updates. Granting users only the permissions required for their responsibilities can reduce the potential impact of an incident. Logging system activity and monitoring unusual behaviour can also support earlier threat detection. Artificial intelligence may analyse large volumes of security information and identify anomalies, but it does not replace human oversight or fundamental security controls. Cloud security is another important component of data protection. Responsibility within cloud environments is commonly shared between the service provider and the customer. Organisations must configure permissions, encryption settings, backups and retention policies correctly. Quantum computing is not currently a general method for storing or protecting information, but it is relevant because of the future risks it may create for existing encryption systems. NIST released its first three finalised post-quantum cryptography standards in 2024 to support protection against these potential threats. Data security is also connected with legal and regulatory obligations. Under the GDPR, administrative fines for certain serious infringements may reach EUR 20 million or 4 per cent of an organisation's total worldwide annual turnover from the preceding financial year, whichever is higher. This maximum penalty is not applied automatically to every data breach, as enforcement depends on the type, severity and circumstances of the infringement. In Türkiye, Law No. 6698 on the Protection of Personal Data aims to protect fundamental rights and freedoms during the processing of personal information and regulate the responsibilities of organisations handling that information. Under Article 12, data controllers must prevent unlawful processing and access and ensure that personal data is stored securely. Compliance requires employee training, risk assessment, security policies and incident response planning in addition to technical controls. Effective **data security management** strengthens both regulatory compliance and stakeholder confidence. ## Discover it in the dictionary ### Comparative Analysis Comparative analysis is a method used to examine two or more objects, processes, documents, datasets or situations according to defined criteria. Its primary purpose… ### Google Dance Google Dance is a term used in the SEO industry to describe fluctuations in Google search rankings during certain periods. During these fluctuations, some… ### Behavioural Targeting Behavioural targeting is a digital marketing method that uses signals from users' behaviour across websites, mobile applications, search engines, social media or other digital… ### User Generated Content (UGC) User Generated Content, commonly abbreviated as UGC, refers to content created by users, customers or community members rather than by brands themselves. This content… ### Python Python is a high-level programming language created by Guido van Rossum and first released in 1991. Its name was inspired by the British comedy… ### Encode Encoding is the process of converting information into a specific format or structure so that it can be transmitted, stored or processed by another… ### Technical SEO Technical SEO refers to the technical optimization work that helps a website be crawled, understood, indexed and experienced more effectively by search engines and… ### Key Performance Indicator A Key Performance Indicator, commonly abbreviated as KPI, is a measurable performance indicator that shows how effectively a business, department, team, project or individual… ### Simple Mail Transfer Protocol (SMTP) SMTP, short for Simple Mail Transfer Protocol, is an application-layer protocol used to send emails and transfer them between mail servers. In simple terms,… ## Track the digital heartbeat with Kriko Subscribe to receive curated insights, news, and ideas shaping the digital landscape. By checking this box, you acknowledge and accept our [privacy policy](https://kriko.io/privacy-policy).