重要数据识别与监管制度研究

Research on Important Data Identification and Regulatory System

摘要: 《信息安全技术重要数据识别规则》(征求意见稿)明确重要数据的概念、特征、分级分类标准等，引发新一轮探讨，如何平衡重要数据安全、流通和维护的关系，实现高效监管、保障多方利益等成为当下数据安全维护和监管较为棘手的问题。目前我国关于重要数据的识别规范存在漏洞且法律监管体系较为分散，需以政府、数据行业和数据管理者三方为主体，从重要数据识别和监管的现状、存在问题出发，在统一立法体系、完善政府识别与监管模式、健全行业相关规定三方面寻求解决路径，以标准化重要数据识别和监管步骤。

Abstract: The “Rules for the Identification of Important Data in Information Security Technology” (draft for soliciting opinions) clarifies the concept, characteristics, classification standards, and other aspects of important data, triggering a new round of exploration. How to balance the relationship between important data security, circulation, and maintenance, achieve efficient supervision, and protect the interests of multiple parties has become a challenging issue in current data security maintenance and supervision. At present, there are loopholes in the identification regulations for important data in China and the legal regulatory system is relatively scattered. It is necessary to take the government, data industry, and data managers as the main body, starting from the current situation and existing problems of important data identification and regulation, and seek solutions in three aspects: unified legislative system, improved government identification and regulation model, and sound industry related regulations, in order to standardize the steps of important data identification and regulation.