数据安全管理

Search documents
【省测绘局】陕西开展自然灾害综合风险基础数据更新工作
Shan Xi Ri Bao· 2025-09-21 22:48
Group 1 - The Natural Resources Department's Second Topographic Survey Team is conducting a comprehensive risk data update for natural disaster prevention in Shaanxi Province, involving multiple industries and covering 23 core data categories across 107 counties [1][2] - The data update includes major disaster-causing data, disaster-bearing body data, comprehensive disaster reduction resources, key hazard data, historical disaster data, assessment and zoning product data, and basic base maps [1] - A "three-level linkage" mechanism is being implemented to promote the work, with technical standards established and training organized for local counties to ensure data quality through a "dual-check" system [1][2] Group 2 - The Second Topographic Survey Team is utilizing software-assisted quality inspection to build a robust data quality control system, ensuring high-quality data collection, updating, and storage [2] - Strict data security management responsibilities are being enforced, including the establishment of confidentiality management systems and training to prevent data leaks [2] - The team emphasizes the principles of "quality first, safety paramount, and application-based" to provide solid data support for building a comprehensive disaster prevention system in Shaanxi Province [2]
【政策综述】关于汽车数据出境安全指引(2025版)征求意见稿的政策分析
乘联分会· 2025-08-14 08:39
Core Viewpoint - The article discusses the new "Automotive Data Export Security Guidelines (2025 Edition)" proposed by the Ministry of Industry and Information Technology and other departments, aiming to establish a secure and efficient mechanism for the cross-border flow of automotive data while ensuring compliance with national laws and regulations [4][5]. Summary by Sections Introduction of the Issue - The guidelines are a response to the rapid development of the intelligent connected vehicle industry in China and the significant increase in automotive exports, which reached 5.859 million units in 2024, a year-on-year increase of 19.3% [5]. Analysis of the Main Content of the Guidelines - The new guidelines differ significantly from the previous "Automotive Data Security Management Provisions (Trial)" issued in 2021, providing clearer and more comprehensive guidance on data export paths, technical protection requirements, and compliance flexibility [7][8]. Key Changes in the Guidelines - The guidelines expand the definition of automotive data processors to include telecommunications operators, autonomous driving service providers, and platform operators, reflecting the evolving landscape of the automotive industry [8][9]. Data Export Behavior Regulations - The guidelines specify that data export behaviors include transmitting data collected within China to overseas entities and allowing foreign entities to access data stored domestically [9]. Data Export Path Regulations - Three main paths for data export are established: safety assessment declaration, standard contract signing, and personal information protection certification, with specific thresholds for each [9][10]. Important Data Definition - The guidelines introduce a three-dimensional framework for identifying important data, categorizing it based on business scenarios, data types, and judgment rules, addressing the long-standing challenge of identifying important data in the automotive sector [11][12]. Implementation Process for Data Export - The guidelines detail the implementation process for data export, including data identification, path determination, and safety assessment, requiring automotive data processors to comply with various legal obligations [14][15]. Safety Protection Requirements - The guidelines outline safety protection requirements for data export, including management, technical protection, logging, and emergency response measures to ensure data security during transmission [15]. Challenges and Opportunities for Automotive Enterprises - The guidelines present significant compliance challenges for automotive companies, including the complexity of identifying important data and the increased operational costs associated with compliance [17][18]. - Conversely, the guidelines also create structural development opportunities, allowing companies to leverage compliance as a competitive advantage and participate in international standard-setting [18][19].
国办:加强全流程安全管理 做好涉及商业秘密、个人信息等数据脱敏处理和加密保护
news flash· 2025-07-08 11:13
Core Viewpoint - The State Council emphasizes the need for enhanced security management throughout the entire process, particularly focusing on the handling of commercial secrets and personal information through data desensitization and encryption protection [1] Group 1: Data Sharing and Management - The State Council's opinion aims to increase the efficiency of government data sharing, ensuring that various regions accurately present their needs based on specific application scenarios [1] - There is a push for optimizing review processes by relevant departments to improve the quality of data supply and enhance response speed and efficiency, thereby facilitating the convenient handling of key matters [1] - The establishment of a national integrated government big data system is highlighted, which will continuously improve the responsibility list for data sharing and promote the connection between vertical management business systems and local government service platforms [1] Group 2: Security Measures - The document stresses the importance of comprehensive security management, particularly in the context of handling sensitive data such as commercial secrets and personal information [1] - It calls for effective desensitization and encryption measures to protect data throughout the entire process [1]
30种风险行为划“生死线”!两项规范剑指收单外包服务机构风险
Hua Xia Shi Bao· 2025-06-06 10:55
提升数据安全管理 华夏时报记者付乐北京报道 6月6日,记者从中国支付清算协会获悉,中国支付清算协会近日发布了《收单外包服务机构备案管理规范》(下称 《备案规范》)和《收单外包服务评价管理规范》(下称《评价规范》),两项规范自发布之日起施行。 两项规范作为《收单外包服务自律管理办法》配套自律规范,进一步明确了外包机构备案、信息登记、风险信息 共享与黑名单管理、自律评价的具体内容、行业标准与操作流程。其中,《备案规范》进一步细化外包机构备案 管理具体内容、标准和程序,强调数据安全管理。《评价规范》则包含了外包机构信息登记、外包机构风险信息 管理、收单外包服务评价、纪律与约束等内容。 6月6日,博通分析金融行业资深分析师王蓬博对《华夏时报》记者表示,规范从根本上通过细化信息登记、风险 分级、黑名单管理及自律评价机制,解决收单外包市场长期存在的违规经营、涉赌涉诈、套码套现、转包分包、 风险传导等问题,提升行业透明度和风险防控能力,推动收单外包服务机构规范化发展。 所谓"收单外包服务机构",是指经市场监督管理机构或国家有权机关批准成立,接受收单机构委托,承办收单非 核心业务并提供相应服务的机构。 简单理解,"收单外包服 ...
南财数据周报(48期):政务数据共享迈入法治化新阶段 山东连发两文推动“人工智能+”
2 1 Shi Ji Jing Ji Bao Dao· 2025-05-17 03:11
Group 1 - The National Data Bureau has issued the "Digital China Construction 2025 Action Plan," marking a significant step in guiding local data management departments in enhancing digital infrastructure and capabilities [2] - The State Council has approved the "Regulations on Government Data Sharing (Draft)," aiming to break down data barriers and establish a unified national government big data system to enhance public service accessibility [3] - The People's Bank of China has released the "Data Security Management Measures for the Business Areas of the People's Bank of China," which will take effect on June 30, focusing on data classification, management, and security compliance [4] Group 2 - Shandong Province has introduced two documents to accelerate the development of artificial intelligence, outlining specific measures and support policies to enhance AI capabilities across various sectors [5][6] - Liaoning Province is advancing the market-oriented allocation of data elements, planning to release several key documents to strengthen digital government construction and maximize data resource potential [7]
央行发布业务领域数据安全管理办法 进一步夯实法治基础
Zheng Quan Ri Bao· 2025-05-09 16:25
从内容上看,《办法》共七章五十六条:第一章明确《办法》制定依据、适用范围、管理原则、工作机制等;第二章对数 据资源目录、分类分级、制度建设、操作规程等方面作出规定;第三章对数据收集、存储、使用、加工、传输、公开、删除等 环节明确安全管理规定;第四章从数据存储保护、数据备份、数据传输安全、算法风险防控等方面明确安全技术规定;第五章 对数据处理活动的风险监测、通报预警、评估与审计、事件分级、响应处置等方面作出规定;第六章对中国人民银行及其分支 机构的监督管理责任落实和数据处理者违反规定行为的处置作出规定;第七章对术语定义、解释权、施行日期作出规定。 本报讯 (记者韩昱)中国人民银行5月9日发布消息称,为贯彻党中央、国务院关于数据安全的决策部署,落实《中华人民 共和国数据安全法》,进一步夯实数据安全的法治基础,指导督促金融从业机构依法依规开展涉及货币信贷、宏观审慎、跨境 人民币、银行间市场、金融业综合统计、支付清算、人民币发行流通、经理国库、征信和信用评级、反洗钱等中国人民银行业 务领域数据(以下简称"业务数据")处理活动,近日,中国人民银行发布《中国人民银行业务领域数据安全管理办法》(以下 简称《办法》),自20 ...
央行发布《中国人民银行业务领域数据安全管理办法》
第一财经· 2025-05-09 10:31
Core Points - The article discusses the implementation of the "Data Security Management Measures in the Business Field of the People's Bank of China," which will take effect on June 30, 2025, after being approved on April 2, 2025 [1][56] - The measures consist of seven chapters and fifty-six articles, outlining the principles, management mechanisms, and specific requirements for data security in the banking sector [1][56] Group 1: General Principles - The measures aim to standardize data security management in the business field of the People's Bank of China and promote the development and utilization of data [3][4] - The principle of "whoever manages the business, manages the data, and manages data security" is emphasized, placing the responsibility on data processors to prevent risks such as data tampering, destruction, and illegal access [4][5] Group 2: Data Classification and Requirements - The People's Bank of China is responsible for establishing standards for data classification and protection, guiding institutions in categorizing their data based on sensitivity and business relevance [7][8] - Data is classified into three levels: general data, important data, and core data, with specific requirements for the protection of important and core data [8][9] Group 3: Data Processing and Security Measures - Data processors must implement comprehensive data security management systems, including establishing internal approval processes for data handling and ensuring the accuracy of data collection [10][11] - Specific security measures are required for data collection, storage, processing, and transmission, including encryption and access control [30][33] Group 4: Risk Management and Incident Response - Data processors are required to monitor risks associated with data processing activities and take immediate corrective actions when risks are identified [39][40] - Annual risk assessments must be conducted for important data, with reports submitted to the People's Bank of China [42] Group 5: Legal Responsibilities - The People's Bank of China has the authority to conduct inspections and impose penalties on data processors that fail to comply with the established data security measures [47][49] - Specific violations, such as not establishing a data security management system or failing to conduct risk assessments, can lead to administrative penalties [49][50]
中国央行:《中国人民银行业务领域数据安全管理办法》已经2025年4月2日中国人民银行第5次行务会议审议通过,自2025年6月30日起施行。
news flash· 2025-05-09 09:04
Core Point - The People's Bank of China has approved the "Data Security Management Measures for the Business Areas of the People's Bank of China," which will take effect on June 30, 2025 [1] Group 1 - The measures were reviewed and approved during the 5th executive meeting of the People's Bank of China on April 2, 2025 [1]