in an interview, you are asked to differentiate between data protection and data privacy. how should you differentiate between data protection and data privacy?