Broadly speaking, the purpose of privacy legislation is to honor specific individual's choices regarding their data and its privacy. Data privacy is different from data security. Privacy is not about protecting sensitive data generically, it's about protecting how specific people's data will be used. Data privacy is concerned with honoring a specific person's choices, adhering to their consents about tracking, selling, or sharing their data, satisfying requests for amendments to the data about them, and fulfilling requests for data access, porting, or deletion.