Cyber Security Promotion Week ｜ Collect my data, you can no longer be casual

As the saying goes, "water can carry boats and can also cover the boat." With the development of technology, the information generated by every behavior in your life is the same as the huge ocean named "data". It has a significant and profound impact on economic development and social life.

The Data Security Law, which is implemented from September 1, 2021, will provide legal basis for how to ensure personal data security, how to use data to improve intelligent services, and how to carry out classification of data.

How much do you know about these knowledge points about the data security law?

1. What is data?

Article 3 of the Data Security Law states that the data referred to in this law refers to any records of information in electronics or other methods.

Small to personal use of mobile phones and computers such as mobile phones, computers and other electronic products, downloaded applications, and storage documents, as large as Internet websites, mobile application software, and various government affairs platforms, all are data.

2. What is data security?

Article 3 of the Data Security Law clearly states that data security refers to the state of effective protection and legal utilization by taking necessary measures, and the ability to ensure a continuous security state.

3. What is the scope of the "Data Security Law"?

Article 2 of the Data Security Law states that data processing activities and security supervision of the People's Republic of China are applied to this law.

Carrying out data processing activities abroad to harm the national security, public interests or citizens and organizations of the People's Republic of China, and the legal responsibilities are held in accordance with the law.

4. What are the specific requirements for data classification and classification protection?

Article 21 of the Data Security Law clearly states that the state establishment of a data classification and classification protection system, based on the importance of data in economic and social development, and once tampering, destruction, leakage or illegal use, illegal use, and national security, and national security. The degree of harm caused by public interests or individuals and organizational legitimate rights and interests shall be classified and classified for data.

The "Data Security Law" strengthens the protection of important data on the basis of data classification and classification, as well as special protection requirements for national core data, and clarifies data such as national security, national economic life pulse, important people's livelihood, and major public interest. data.

Fifth, research and development of new data, what is the "bottom line"?

Article 28 of the Data Security Law stipulates that the development of data processing activities and research and development of new data should be conducive to promoting economic and social development, enhanced people's well -being, and consistent with social morality and ethics.

6. Can we provide foreign data from foreign justice or law enforcement agencies?

Article 36 of the Data Security Law clearly states that the competent authorities of the People's Republic of China shall deal with the international treaties and agreements concluded or participated by the People's Republic of China, or in accordance with the principle of equality and reciprocity. Essence Without the approval of the competent authority of the People's Republic of China, the domestic organizations and individuals shall not provide data stored in the territory of the People's Republic of China to foreign justice or law enforcement agencies.

7. What is the data security supervision of the public security organs?

The "Data Security Law" fully considers the functional advantages and practical effects of the department, and clarifies the data security supervision responsibilities of the public security organs in the general rules.

In terms of system design, Article 27 of the "Data Security Law" requires the data security management system of the entire process shall be carried out on the basis of the protection of the network security level protection system, that is, "data processing activities should be established and improved in accordance with the provisions of laws and regulations in accordance with the provisions of laws and regulations Full -process data security management system, organize data security education and training, take corresponding technical measures and other necessary measures to ensure data security. Use the Internet and other information networks to carry out data processing activities. The above data security protection obligations. The processor of important data should clarify the person in charge of data security and management agency to implement the responsibility of data security protection. "

8. What are the punishments of the organization of data processing activities and individuals who do not perform the obligations of security protection?

Article 45 of the Data Security Law clarifies the legal responsibility: shall be ordered by relevant competent authorities to make corrections and give warnings. Those who can be fined more than 100,000 yuan and less than 100,000 yuan; if they refuse to correct or cause serious consequences of data leakage, they will be fined 500,000 yuan to 2 million yuan, and they may be ordered to suspend related businesses, suspend business rectification, revoke related related related related The business license or revoking business license will be fined 50,000 yuan to more than 200,000 yuan or more than 200,000 yuan.

In violation of the national core data management system and endangering national sovereignty, security, and development benefits, the relevant authorities shall be fined 2 million yuan or less or less, and shall be ordered to suspend related business, suspend business, and revoke related business licenses according to the situation. Or revoke a business license; if a crime is constituted, criminal responsibility is investigated in accordance with the law.

- END -