There’s a major distinction between data security and data privacy—but U.S. legal departments don’t necessarily know the difference.

That’s according to Sheila FitzPatrick, one of the foremost experts in data privacy laws who works closely with the U.S. government and the Council of the European Union, among other groups. In a session at the first CLOC Institute in San Francisco, she explained the differences between data security and data privacy and what international data privacy laws mean for global companies and their legal operations.