Beijing releases first data classification, grading regulations
The Office of the Beijing High-level Autonomous Driving Demonstration Zone has released regulations on data classification and grading in the Beijing Intelligent Connected Vehicle Policy Pilot Zone.
This is the first set of data classification and grading management regulations for autonomous driving demonstration zones issued by Beijing.
The regulations provide detailed guidelines for the classification and grading of data for the integration of vehicle-road-cloud. They also promote the formation of a data governance structure combining government regulation and market self-discipline, and lay the foundation for the security of industrial data and the commercialization of data circulation and transactions.
The regulations have three key highlights: comprehensively clarifying data assets, establishing data classification rules, and refining relevant provisions of the national data security law.
The regulations implement protective measures throughout the entire life cycle of data circulation.
Relevant organizations must strictly adhere to the data classification level and formulate corresponding protective measures, covering the entire process of data collection, storage, use, processing, transmission, provision, and disclosure, with the basic principle of minimizing the harm caused by data security incidents after they occur and maximizing the value of data assets on the basis of compliance.
Companies can refer to the experience of data classification and grading management in the demonstration zone to propose four levels of protective measures from low to high, corresponding to requirements for access control.
Furthermore, the regulations gradually strengthen the data governance responsibilities of enterprises.
They clarify and define the boundaries of data classification and grading work, refine the implementation of national requirements for core data in the demonstration zone, and promote enterprises to assume corresponding responsibilities in accordance with laws and regulations.
Meanwhile, by maintaining communication with relevant departments, establishing mechanisms for the circulation of data elements, and addressing relevant violations, the demonstration zone can take regulatory measures such as interviewing the subjects, suspending vehicle testing, and imposing time-limited rectifications.