Although the terms data protection and data privacy are sometimes used synonymously, there is a significant distinction between the two. Data privacy establishes who has access to the data, whereas data protection provides the tools and laws to actually restrict access to the data.