国家网信办：金融信息服务数据分类分级规则征求意见

Core Viewpoint - The National Internet Information Office, in collaboration with relevant departments, has drafted the "Guidelines for the Classification and Grading of Financial Information Service Data" to enhance data security in financial information services, which is currently open for public consultation [1][2]. Group 1: Data Classification - Financial information service data is categorized based on business attributes into three primary categories: business data, user data, and enterprise data [1]. - Business data is further divided into five secondary categories: financial market data, macroeconomic data, industry indicator data, organizational data, and information report data, which can be detailed into 52 tertiary categories including stock data, bond data, fund data, wealth management data, foreign exchange data, and commodity data [1]. - User data is classified into two secondary categories: individual user data and institutional user data, with individual user data encompassing basic information, transaction data, and biometric identification information [1]. - Enterprise data is categorized into two secondary categories: operational management data and system operation and maintenance data [1]. Group 2: Data Grading - The guidelines classify data into four levels based on its importance and sensitivity, which are core data, important data, sensitive general data, and routine general data [2]. - The grading of data is determined by factors such as coverage, time span, accuracy, public status, and geographic location, and should be regularly reviewed and updated when there are changes in business attributes or potential harm [2]. - Industry experts emphasize that due to the high sensitivity of information in the financial sector, effective data security measures are crucial for ensuring financial safety, and the classification and grading will help financial institutions clarify data security priorities and allocate resources effectively [2].