Data privacy focuses on the use and governance of personal data, including policies, legal compliance, and public expectation of privacy. It's about ensuring personal information is used appropriately, lawfully, and with consent. On the other hand, information security is broader and includes protecting information from unauthorized access to ensure its confidentiality, integrity, and availability, regardless of whether the information is personal.