数据分类分级保护的逻辑厘定与制度构建--以重要数据识别和管控为中心

The Logic Elucidation and System Construction of Categorical and Hierarchical Data Protection——Centering on the Recognition and Protection of Important Data

数字经济和科技变革浪潮下,数据保护利用需求更加多元,数据流通处理形态日益复杂,传统的“整齐划一”数据安全保护模式力有不逮,传统的信息安全保护范式也难以应对因大规模流通处理而产生的新型数据安全风险。数据分类分级保护制度在转变数据安全保护理念和更新保护范式的基础上,对不同重要性和风险等级的数据采取差异化和针对性的管控措施,能够应对数据大规模流通处理下的新型数据安全风险,兼顾数据安全保障和数据开发利用的双重需求。应以网络安全等级保护作为制度衔接与启示,总结数据分类分级保护的实践经验,明确数据分类分级的基本理念和关键要素,建立数据分类分级体系标准和数据分类分级保护制度框架,以充分发挥数据分类分级制度的实效,平衡数据安全与利用,促进数字经济的发展。

With the rise of digital economy and the development of technology,the demand for data protection and utilization is more diversified and the form of data circulation and processing is increasingly complex,so the traditional“uniform”data security protection model is inadequate and the traditional information security protection paradigm can hardly cope with the new data security risks arising from the large-scale data circulation and processing.On the basis of changing the data security protection concept and updating the protection paradigm,the categorical and hierarchical data protection system adopts differentiated and targeted protection measures for data of different importance and risk levels,which can cope with the new data security risks arising from large-scale data circulation and processing,and take into account the both needs of data security protection and data utilization.Taking graded protection of cybersecurity as the convergence and inspiration,drawing on the practical experience of categorical and hierarchical data protection,specify basic principles and key elements of data classification and grading,establishing data categorical and hierarchical standards,and establishing data categorical and hierarchical protection system framework,to give full effect of categorical and hierarchical data protection system to balance data security and utilization and promote the development of digital economy.