By way of introduction, Data Protection means how to control the collection, use, and dissemination of personal information. In addition, data security is the protection of personal information from unauthorized access or use. Before 2002 there was no comprehensive law protecting all the IPRs, most importantly including Undisclosed Information, Trade secrets and the ideas of Copyright. The international movement towards the protection of individual privacy in light of technological advancement created the need for regulating adequate protection, which would serve the flexible nature of Data without exposing data owners to the risks of violation and abuse.  In light of all above mentioned, this research aims to demystify the scope of data protection between Intellectual property right (IPR) law and new data protection law, through the analysis of data protection in both laws and the differentiation between commercial information and personal information.