Information security is a more comprehensive approach to safeguarding all types of information. Data protection really focuses on personal data or sensitive data.