Key areas include:
Confidentiality — only authorized people can access data.
Integrity — data remains accurate and is protected from unauthorized changes.
Availability — authorized users can access data when needed.
Privacy — personal information is collected and used appropriately.
Security — technical and organizational measures protect data.
Compliance — organizations follow applicable data-protection laws and regulations.