Bridging the gap between data security and privacy