Data outbound policy is frequent, how can intelligent connected car data be "security inspection"?

The automotive industry is one of the industries with a high degree of globalization. Many car companies set the R & D center overseas to achieve the full use of global R & D resources. Based on the characteristics of the industry, cross -border circulation of automotive data has become an inevitable choice for many car companies technology iterative and technological innovation.

For Chinese car companies, with the rapid development of the intelligent connected automotive industry and the surge in automobile export volume, the demand for data from data outbound exit has also increased.

In recent years, my country has continuously strengthened the protection of network security, data security, and personal information, and has promulgated a number of laws and regulations. Not long ago, the National Internet Information Office officially issued the "Measures for Evaluation of Data Outbound Security", which provided specific guidance for data outbound security assessment. In this context, how should car companies make a good preparation for the departure of car data? How to do a good job of security while giving play to the role of automobile data? Become the focus of attention in the industry.

Data departure requires "security inspection"

In the context of globalization, China's data outbound also shows a normal trend. After the implementation of the Personal Information Protection Law, the evaluation system for data outbound security has also officially implemented.

On September 1st, the "Evaluation Measures for Data Outbound" (hereinafter referred to as the "Evaluation Measures" released by the State Cyber ​​Information Office was officially effective. It is reported that the "Evaluation Measures" is formulated based on laws and regulations such as the "Network Security Law", "Data Security Law" and "Personal Information Protection Law". Compared with previous laws and regulations, the "Evaluation Measures" put forward the specific requirements of the "security inspection" of my country's data outbound, marking the basic formation of my country's data outbound rules.

Industry insiders have revealed that the current outbound of my country's data mainly includes three paths, which are official evaluation, certification and standard contract paths. After the "Evaluation Measures" was introduced, car companies need to make strategic adjustments and planning to their respective data outbound activities and subsequent arrangements.

In fact, the "Several Provisions of Automobile Data Safety Management (Trial)" (hereinafter referred to as "Automobile Data Regulations"), which was officially implemented on October 1 last year, also systematically clarified the guidelines and requirements of car data outbound, that is, car data processors to go Overseas provides important data, and must not exceed the clear purpose, scope, method and data types, scale, and scale of the outbound safety assessment.

Chen Wenhao, a partner of Beijing Zhide Law Firm, told a reporter from the Securities Times that in practice, the "evaluation method" is higher. It is mainly based on the two categories of personal information and important data. Regulations, these two major data are closely related to the automotive industry.

In his opinion, research and solving data outbound problems must fit the characteristics of specific industries. As an industry with rich data types, large data volume, long data circulation chain, and high data sensitivity, it has attracted much attention from regulatory authorities. The "Automobile Data Regulations" proposes the principles of processing car data and put forward a series of compliance requirements for the outbound of car data, which reflects the special regulatory measures taken by the regulatory agency to the characteristics of the automotive industry.

It is reported that the industry generally divides vehicle data into four categories, including vehicle data, user data, application services and external environmental data. As the characteristics of connectivity of automotive products are becoming more and more obvious, the corresponding types of car data are becoming richer and richer.

The operating status, positioning and navigation data of the camera, laser radar, battery, etc., positioning and navigation data, basic data of infrastructure, 5G-V2X and other vehicle road collaborative information, environmental perception data, etc. If you need to leave the country, you may trigger the "evaluation method "Compliance requirements for important data in".

Zhao Jian, director of data compliance of the DASA Laboratory of Shanghai Motorcycle Inspection and Certification Technology Research Center Co., Ltd., told the Securities Times reporter that the automotive industry is a clear industry in design, research and development, production, and sales. It is very high. Due to the needs of all aspects of the operation, the demand for data cross -border is very strong and fixed, which is almost the rigid need for car companies. A series of laws and regulations revolving around the country's exit of data will not hinder these needs, but to make the data outbound of car companies more orderly and more secure.

Urgently need to build a data management system

With the widespread application and accelerated penetration of new technologies such as artificial intelligence, 5G, big data, network connectivity, cloud computing, blockchain, etc. in the automotive field, cars are becoming a data center on the wheels.

Some people in the industry said that the grasp of data has become an important manifestation of the core competitiveness of car companies. The four vitamin new CEO Cheng Peng said that car data is already a new type of fuel, which has a high value as lithium ore.

While clarifying the value of car data, the industry also strengthened the risk awareness of car data management due to the malicious network attack encountered by some networking platforms.

Public data shows that in the past five years, the number of intelligent connected cars has increased 20 times that of hackers, of which 27.6%of the attacks involved vehicle control.

Specific to the field of automotive data outbound, Li Jingchun, deputy director and chief engineer of the National Information Technology Security Research Center, and deputy director of the Information Security Specialist Committee of the China Information Association has made public risk prompts. In his opinion, the current problem in the field of automobile data is still relatively prominent. First, individual enterprises have not collected location data and surrounding environmental data in accordance with relevant national laws and regulations and departmental regulations. Data cross -border contracts do not meet the requirements of national regulations. Data cross -border assessment, unqualified, not filing, and unattended declarations. In response to the challenges brought to the automotive industry after the above issues and related regulations, the industry believes that it should be overcome one by one from the regulatory level, mechanism layer, and enterprise layer.

The first is the regulatory level. Zhang Yongwei, the vice chairman, secretary -general and chief expert of the China Electric Vehicle Hundred People Association, believes that the most urgent thing is to further improve the automotive data management system required for the development of intelligent connected cars, especially in the explosion of progress data explosion. In the era, the supervision of data should have a clear functional division of labor. What functions should different regulatory authorities assume? What role should the data chains in their respective supervision play on different data chains? This series of issues need to be clarified.

Chen Wenhao also believes that the outbound supervision of the "Evaluation Measures" is for the entire industry, but there are differences in the characteristics of different industries, and the business model is also very different, which will bring some challenges to the regulatory layer. The supervision of data outbound is not only covered with wide coverage, but also depth. It is recommended that the regulatory levels mostly communicate with industry organizations and heads to solve the above problems. At the same time, the Ministry of Industry and Information Technology will express corresponding opinions on the supervision of automobile data to provide more professional review suggestions.

In addition, in response to the early warning of the data outbound and after the after -after accounting, the industry believes that it also needs to establish a clear system through the regulatory level. Zhang Yongwei said that the power and responsibility of automobile data is very complicated and involves many legal issues. Therefore, it is necessary for regulatory regulations to establish a certain early warning system and post -after -management system to improve the management expectations of enterprises in data use.

Secondly, at the level of mechanism, many people in the industry said that the exit of automobile data needs to be the first to be clear and classified to the data, which can improve the efficiency of data outbound compliance. It is hoped that the industry authorities or institutions will formulate corporate data classification and classification forms, and use data to sort out and identify the data in the data outbound security assessment.

Bai Yusi, a security certification expert and a lawyer of international registration information system, told the Securities Times reporter that the automotive industry and enterprises should pay attention to establishing a comprehensive data security and data compliance management system including classification and classification systems, and carry out data outbound security in accordance with laws and regulations. Evaluate, actively regulate data outbound behavior and continue to supervise.

Finally, at the level of enterprise, Chen Wenhao told the Securities Times reporter that before the introduction of the series of laws and regulations on data outbound exit in my country, some multinational car companies paid attention to and recognized the compliance issues of data outbound. After the "Auto Data Regulations" and "Evaluation Measures" are introduced, if the car company does not prepare for compliance in advance, it may affect normal business development. If the compliance of the enterprise will ultimately constitute the information leakage Then the company must face high fines, and the company's relevant responsible persons and management must also bear the corresponding responsibilities.

Zhao Jian suggested that enterprises that develop related businesses related to the Internet of Vehicle are necessary to classify data, and establish data asset accounts in accordance with national laws and regulations to ensure precise identification of important data and personal information.

"When the company's sensitivity judgment of a certain type of data is hesitant, and no existing regulations can follow, they can report them to the regulatory authorities according to the principle of strict treatment." The world can predict that the scale of intelligent connected automobile data will become larger and larger, and through the clearness and improvement of laws and regulations, the accumulation of the experience of leaving the country, etc. The development of ascension will also be more helpful for the technology improvement of enterprises.

At the same time, because the automotive industry chain is a long industry, the radiation range is very extensive, and the industrial boundary is continuously extended. The types of data involved are becoming more and more rich. Essence

Chen Wenhao believes that the level of data outbound compliance of the automotive industry chain will eventually be reflected in the host factory. For parts and component companies, they are obliged to cooperate with vehicle companies to do a good job of data outbound compliance. This compliance ability also reflects the competitiveness of component companies.

Data cross -border transmission challenge

The core of data is circulation and application, but data also involves competitive issues, data sovereignty and information security issues.

In the context of the high degree of integration of the global intelligent connected automotive industry, how to ensure the further circulation and integration of automotive data has become the focus of attention in the industry.

At the 2022 World Intelligent Connected Auto Conference held a few days ago, the Secretary -General of the European Automobile Industry Association, Sigrid Fris, pointed out that in the field of intelligent connected automobiles, the association has established a successful working mechanism with the main supervisor and scientific research institutions in China Essence When establishing a global data economy, the free flow of data is very critical. Call on governments in China, the European Union, the United States, and Japan to promote cross -border transmission of car data through bilateral trade agreements or multilateral trade agreements as soon as possible.

Chen Wenhao told the Securities Times reporter that from a global perspective, China, the United States, and the European Union have a relatively complete legal and regulatory system in data supervision. It is relatively cautious about data outbound. The chain of car data is very long, and the types involved are also very rich. The possibility is less likely to release the circulation of car data globally globally. "It is not ruled out that the possibility of bilateral or multilateral treaties within a limited scope of major automotive powers, everyone has reached a tacit understanding on the exit of specific data." Chen Wenhao believes that there is a certain challenge to promote the cross -border circulation of car data globally worldwide. However, the industry can explore a treaty within some specific range.

Zuo Xiaodong, a professor at the School of Public Affairs and the School of Internet Space Security of China University of Science and Technology, also expressed a similar point of view. In his opinion, the establishment of a green channel for cross -border international data for intelligent connected cars is worthy of discussions in the industry, and relevant channels and calibers have been reserved in law.

- END -