Businesses increasingly collect, store, process, and share large amounts of consumer data through websites, mobile applications, digital payments, loyalty programmes, social media platforms, online shopping, and customer relationship management systems. Consumer data may include names, addresses, telephone numbers, email addresses, financial information, purchase histories, browsing behaviour, location details, preferences, photographs, and other information that can identify or relate to an individual. The increasing dependence of business on personal data creates important ethical responsibilities because misuse, unauthorized disclosure, excessive collection, or insecure storage of consumer information can cause financial, psychological, social, and reputational harm. Therefore, data protection has become an important dimension of consumer rights and Business Ethics. The right to privacy is one of the most fundamental consumer rights in relation to data protection. Consumers have the ethical right to expect that information provided to a business will be handled respectfully and used only for legitimate purposes. Companies should not treat personal information as an unlimited commercial resource. Consumers should be able to maintain reasonable control over information about themselves. Businesses should therefore establish clear privacy policies and protect personal information from unnecessary exposure. Respecting privacy demonstrates that an organisation recognizes consumers as individuals with dignity rather than merely as sources of commercial information. The right to informed consent is another important consumer right. Consumers should know what personal information is being collected, why it is being collected, how it will be used, how long it will be retained, and whether it will be shared with third parties. Consent should be meaningful, voluntary, and understandable rather than hidden within complicated terms and