Workflow
数据安全管理
icon
Search documents
【省测绘局】陕西开展自然灾害综合风险基础数据更新工作
Shan Xi Ri Bao· 2025-09-21 22:48
Group 1 - The Natural Resources Department's Second Topographic Survey Team is conducting a comprehensive risk data update for natural disaster prevention in Shaanxi Province, involving multiple industries and covering 23 core data categories across 107 counties [1][2] - The data update includes major disaster-causing data, disaster-bearing body data, comprehensive disaster reduction resources, key hazard data, historical disaster data, assessment and zoning product data, and basic base maps [1] - A "three-level linkage" mechanism is being implemented to promote the work, with technical standards established and training organized for local counties to ensure data quality through a "dual-check" system [1][2] Group 2 - The Second Topographic Survey Team is utilizing software-assisted quality inspection to build a robust data quality control system, ensuring high-quality data collection, updating, and storage [2] - Strict data security management responsibilities are being enforced, including the establishment of confidentiality management systems and training to prevent data leaks [2] - The team emphasizes the principles of "quality first, safety paramount, and application-based" to provide solid data support for building a comprehensive disaster prevention system in Shaanxi Province [2]
【政策综述】关于汽车数据出境安全指引(2025版)征求意见稿的政策分析
乘联分会· 2025-08-14 08:39
Core Viewpoint - The article discusses the new "Automotive Data Export Security Guidelines (2025 Edition)" proposed by the Ministry of Industry and Information Technology and other departments, aiming to establish a secure and efficient mechanism for the cross-border flow of automotive data while ensuring compliance with national laws and regulations [4][5]. Summary by Sections Introduction of the Issue - The guidelines are a response to the rapid development of the intelligent connected vehicle industry in China and the significant increase in automotive exports, which reached 5.859 million units in 2024, a year-on-year increase of 19.3% [5]. Analysis of the Main Content of the Guidelines - The new guidelines differ significantly from the previous "Automotive Data Security Management Provisions (Trial)" issued in 2021, providing clearer and more comprehensive guidance on data export paths, technical protection requirements, and compliance flexibility [7][8]. Key Changes in the Guidelines - The guidelines expand the definition of automotive data processors to include telecommunications operators, autonomous driving service providers, and platform operators, reflecting the evolving landscape of the automotive industry [8][9]. Data Export Behavior Regulations - The guidelines specify that data export behaviors include transmitting data collected within China to overseas entities and allowing foreign entities to access data stored domestically [9]. Data Export Path Regulations - Three main paths for data export are established: safety assessment declaration, standard contract signing, and personal information protection certification, with specific thresholds for each [9][10]. Important Data Definition - The guidelines introduce a three-dimensional framework for identifying important data, categorizing it based on business scenarios, data types, and judgment rules, addressing the long-standing challenge of identifying important data in the automotive sector [11][12]. Implementation Process for Data Export - The guidelines detail the implementation process for data export, including data identification, path determination, and safety assessment, requiring automotive data processors to comply with various legal obligations [14][15]. Safety Protection Requirements - The guidelines outline safety protection requirements for data export, including management, technical protection, logging, and emergency response measures to ensure data security during transmission [15]. Challenges and Opportunities for Automotive Enterprises - The guidelines present significant compliance challenges for automotive companies, including the complexity of identifying important data and the increased operational costs associated with compliance [17][18]. - Conversely, the guidelines also create structural development opportunities, allowing companies to leverage compliance as a competitive advantage and participate in international standard-setting [18][19].
国办:加强全流程安全管理 做好涉及商业秘密、个人信息等数据脱敏处理和加密保护
news flash· 2025-07-08 11:13
Core Viewpoint - The State Council emphasizes the need for enhanced security management throughout the entire process, particularly focusing on the handling of commercial secrets and personal information through data desensitization and encryption protection [1] Group 1: Data Sharing and Management - The State Council's opinion aims to increase the efficiency of government data sharing, ensuring that various regions accurately present their needs based on specific application scenarios [1] - There is a push for optimizing review processes by relevant departments to improve the quality of data supply and enhance response speed and efficiency, thereby facilitating the convenient handling of key matters [1] - The establishment of a national integrated government big data system is highlighted, which will continuously improve the responsibility list for data sharing and promote the connection between vertical management business systems and local government service platforms [1] Group 2: Security Measures - The document stresses the importance of comprehensive security management, particularly in the context of handling sensitive data such as commercial secrets and personal information [1] - It calls for effective desensitization and encryption measures to protect data throughout the entire process [1]
30种风险行为划“生死线”!两项规范剑指收单外包服务机构风险
Hua Xia Shi Bao· 2025-06-06 10:55
Core Viewpoint - The China Payment and Clearing Association has released two new regulations, the "Record Management Specification for Acquiring Outsourcing Service Institutions" and the "Evaluation Management Specification for Acquiring Outsourcing Services," aimed at enhancing the transparency and risk management of the acquiring outsourcing market [2][4]. Group 1: Regulations Overview - The new regulations clarify the registration, information recording, risk information sharing, blacklist management, and self-discipline evaluation processes for outsourcing institutions [2][4]. - The "Record Management Specification" details the conditions, information, and materials required for registration, as well as the standards and timelines for information review [4]. - The "Evaluation Management Specification" outlines the requirements for licensed institutions to register information about cooperating outsourcing institutions and specifies 30 types of risk behaviors [6][7]. Group 2: Risk Management - The regulations aim to address long-standing issues in the acquiring outsourcing market, such as illegal operations, gambling, fraud, and risk transmission, thereby improving industry transparency and risk control capabilities [2][5]. - The "Evaluation Management Specification" lists 30 specific risk behaviors, including administrative penalties for illegal operations and involvement in money laundering or fraud [6][7]. - A blacklist management mechanism is established to ensure that institutions share risk information and collectively penalize non-compliant outsourcing institutions, significantly increasing the cost of violations [7][9]. Group 3: Industry Impact - The introduction of these regulations is expected to lead to a more standardized and transparent market, accelerating industry consolidation in the short term and benefiting compliant institutions in the long term [4][5]. - The evaluation results of outsourcing institutions will be publicly available for licensed institutions to make informed partnership decisions, with non-compliant institutions required to terminate partnerships within 20 working days [9].
南财数据周报(48期):政务数据共享迈入法治化新阶段 山东连发两文推动“人工智能+”
Group 1 - The National Data Bureau has issued the "Digital China Construction 2025 Action Plan," marking a significant step in guiding local data management departments in enhancing digital infrastructure and capabilities [2] - The State Council has approved the "Regulations on Government Data Sharing (Draft)," aiming to break down data barriers and establish a unified national government big data system to enhance public service accessibility [3] - The People's Bank of China has released the "Data Security Management Measures for the Business Areas of the People's Bank of China," which will take effect on June 30, focusing on data classification, management, and security compliance [4] Group 2 - Shandong Province has introduced two documents to accelerate the development of artificial intelligence, outlining specific measures and support policies to enhance AI capabilities across various sectors [5][6] - Liaoning Province is advancing the market-oriented allocation of data elements, planning to release several key documents to strengthen digital government construction and maximize data resource potential [7]
央行发布业务领域数据安全管理办法 进一步夯实法治基础
Zheng Quan Ri Bao· 2025-05-09 16:25
Core Points - The People's Bank of China (PBOC) has issued the "Data Security Management Measures for the Business Areas of the People's Bank of China," effective from June 30, 2025, to enhance data security in financial institutions [1][2] - The measures consist of seven chapters and fifty-six articles, covering data resource classification, security management regulations, technical security provisions, risk monitoring, and supervisory responsibilities [2][3] - The PBOC emphasizes the importance of data protection obligations for data processors while allowing for exemptions under certain circumstances, aiming to encourage proactive data security measures [3] Group 1 - The "Data Security Management Measures" aim to implement the decisions of the Central Committee and the State Council regarding data security and to establish a legal foundation for data security in financial sectors [1][2] - The scope of the measures focuses on financial institutions and other entities approved by the PBOC, specifically in areas such as monetary credit, macro-prudential management, and anti-money laundering [2][3] - The measures include provisions for data collection, storage, usage, processing, transmission, and deletion, ensuring comprehensive security management throughout these processes [2] Group 2 - The PBOC will guide financial institutions in complying with the measures to ensure the security of business data and promote the lawful use of data while protecting the rights of individuals and organizations [3] - The measures also outline the responsibilities of the PBOC and its branches in supervising data processing activities and addressing violations [2][3] - The PBOC encourages data processors to enhance data security protection and to provide valuable risk intelligence to identify significant data security risks [3]
央行发布《中国人民银行业务领域数据安全管理办法》
第一财经· 2025-05-09 10:31
Core Points - The article discusses the implementation of the "Data Security Management Measures in the Business Field of the People's Bank of China," which will take effect on June 30, 2025, after being approved on April 2, 2025 [1][56] - The measures consist of seven chapters and fifty-six articles, outlining the principles, management mechanisms, and specific requirements for data security in the banking sector [1][56] Group 1: General Principles - The measures aim to standardize data security management in the business field of the People's Bank of China and promote the development and utilization of data [3][4] - The principle of "whoever manages the business, manages the data, and manages data security" is emphasized, placing the responsibility on data processors to prevent risks such as data tampering, destruction, and illegal access [4][5] Group 2: Data Classification and Requirements - The People's Bank of China is responsible for establishing standards for data classification and protection, guiding institutions in categorizing their data based on sensitivity and business relevance [7][8] - Data is classified into three levels: general data, important data, and core data, with specific requirements for the protection of important and core data [8][9] Group 3: Data Processing and Security Measures - Data processors must implement comprehensive data security management systems, including establishing internal approval processes for data handling and ensuring the accuracy of data collection [10][11] - Specific security measures are required for data collection, storage, processing, and transmission, including encryption and access control [30][33] Group 4: Risk Management and Incident Response - Data processors are required to monitor risks associated with data processing activities and take immediate corrective actions when risks are identified [39][40] - Annual risk assessments must be conducted for important data, with reports submitted to the People's Bank of China [42] Group 5: Legal Responsibilities - The People's Bank of China has the authority to conduct inspections and impose penalties on data processors that fail to comply with the established data security measures [47][49] - Specific violations, such as not establishing a data security management system or failing to conduct risk assessments, can lead to administrative penalties [49][50]
中国央行:《中国人民银行业务领域数据安全管理办法》已经2025年4月2日中国人民银行第5次行务会议审议通过,自2025年6月30日起施行。
news flash· 2025-05-09 09:04
Core Point - The People's Bank of China has approved the "Data Security Management Measures for the Business Areas of the People's Bank of China," which will take effect on June 30, 2025 [1] Group 1 - The measures were reviewed and approved during the 5th executive meeting of the People's Bank of China on April 2, 2025 [1]