European Data Protection Supervisor: "The role of data protection legislation", Conference on "Security of e-Government" at the European Parliament, 19 February 2013

“‘Security’ and ‘privacy’ should not be confused, nor should ‘privacy and data protection’ be treated as a subcategory of security. These concepts should rather be regarded as distinct and only partly overlapping. Briefly put: good security does not necessarily provide good privacy and data protection, but good privacy and data protection would always require good security.” See: EDPS paper (pdf)