With the advancement of enterprise informatization, the issue of data security and privacy protection has received increasing attention. From the technical point of view, this paper deeply analyzes the data security problems faced by enterprises in the process of informatization. At the same time, the core status of privacy protection technology and its technical and compliance challenges are discussed. Furthermore, a comprehensive strategy of data security and privacy protection is proposed. Through the implementation of these strategies, enterprises can more effectively protect data security and user privacy, and ensure the healthy development of enterprise informatization.