What is data integrity?
Definition
Data integrity means data hasn't been changed in an unauthorized way since it was created, sent or stored. It's one of the three core goals of information security, along with confidentiality and availability.
- Category
- Security
- Also called
- integrity
- Last updated
NIST defines data integrity as a property whereby data has not been altered in an unauthorized manner since it was created, transmitted, or stored. A related federal definition frames integrity as guarding against improper modification or destruction of information.
That covers two different problems. One is accidental: a disk error, a bad file transfer or a software bug quietly corrupts a file. The other is deliberate: someone changes a record, a payment detail or a document without permission. Both leave you with data that looks fine but can't be trusted.
Systems protect integrity with checks. A checksum or cyclic redundancy check detects accidental changes. NIST describes a CRC as a checksum that isn't a cryptographic hash, used where accidental changes are expected. Stronger protection uses an authentication code or a digital signature, so an attacker can't change data and cover it up.
A simple example: you download a software installer and the site publishes a hash next to it. If the hash of your file matches, the file is the one the publisher released. If it doesn't, it was corrupted or swapped on the way.
For an ordinary person, integrity shows up as trust. Your bank balance and your medical record both have to be right, not just private.
Data integrity vs. related terms
- Confidentiality is about who can see the data. Integrity is about whether it's correct and unchanged.
- Data accuracy is about whether the facts are right when entered. Integrity is about whether they stayed that way.
- Data breach is about unauthorized access, which may or may not change anything.
How to protect yourself
- 1
Verify downloads
When a publisher lists a checksum or signature for a file, compare it before you run the file.
- 2
Keep backups you can restore
Keep at least one copy that isn't connected to your computer all the time, and test restoring a file now and then.
- 3
Check important records
Look over bank statements and account details for changes you didn't make, and report them to the company right away.
- 4
Use two-step verification
It makes it harder for someone to log in and edit your accounts. A security key is the strongest version.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
What is the difference between data integrity and data security?
Data security is the whole job of protecting information. Integrity is one part of it: making sure data stays correct and unaltered. The other parts are confidentiality and availability.
What threatens data integrity?
Faulty hardware, software bugs, malware and attackers who edit data. Transfers and long-term storage are the usual weak points.
How do you check data integrity?
With checksums, hashes or digital signatures. A match shows the data is the same as the original.
Is data integrity a privacy issue?
Yes. Data protection law such as the UK GDPR has an 'integrity and confidentiality' principle, so organisations have to keep personal data secure and correct.
Sources
Something wrong or out of date? Tell us and we'll re-check it.