What are the key differences between data privacy and data security, and how do organizations ensure both are adequately addressed?