金融科技的数据风险及其防控策略

Data Risks of FinTech and the Prevention Strategies

金融科技提升了金融活动的深度和广度,数据作为其中不可或缺的要素,既成为金融科技的核心驱动,也为金融科技带来了高度复杂的数据风险。此类风险的治理困局与金融监管方的监管路径依赖和职能分工混乱有关,反映出数据治理路径无法缓解信息匮乏、多元治理主体赋能不足的现状。应对金融科技数据风险宜按照“源头防控、业态修正、协同共治、风险吸收”的逻辑,从治理主体赋能与数据风险吸收两个角度出发来构建风险防控体系。一方面,应通过强化金融科技数据安全事件报告与数据流通信息披露义务缓解市场信息差,并修正现有数据流动机制以赋能多元治理主体,从而约束金融科技行业的数据风险敞口;另一方面,有必要基于现有监管沙盒与金融基础设施管理制度,设置数据风险吸收空间,防范数据风险向外传导。

FinTech has expanded the scope and depth of financial activities,and data,as an indispensable element of FinTech,has not only become the core driving force of FinTech,but also brought about complex data risks to FinTech.The governance dilemma of such risks is related to regulatory path dependence and confusing division of functions among financial regulators.It also reflects that current data governance path can not address the problem of information gap and insufficient empowerment of multiple governance subjects.To tackle the data risks of FinTech,it is recommended to establish a risk prevention and control system from the perspectives of governance subjects’empowerment and data risk absorption in accordance with the logic of“source prevention and control,industry modification,collaborative governance,and risk absorption”.On the one hand,it is essential to mitigate the information gap in the market by strengthening the obligation to report data security incidents and disclose data flow information in FinTech.Moreover,it is necessary to amend the existing data flow mechanism to empower multiple governance subjects so as to restrain the data risk exposure in the FinTech industry.On the other hand,it is imperative to establish a data risk absorption space based on the existing regulatory sandbox and financial infrastructure management system to prevent the outward transmission of data risks.