Strengthen data security management of bank insurance institutions
Our newspaper, Beijing, March 22 (Reporter Ouyang Jie) The State Administration of Finance and Administration of Finance and Administration recently formulated the “Measures for Data Security Management of Bank Insurance Agency (Draft for Solicitation)” (hereinafter referred to as the “Measures”).The “Measures” requires bank insurance institutions to implement personal information, and shall be implemented in accordance with the principle of “clear notification and authorization consent” and fulfill the necessary notification obligations; collecting personal information should be limited to the minimum range of the purpose of financial business treatment, and shall not be collected excessivelyWhen sharing and providing personal information, personal consent should be obtained.
The “Measures” require bank insurance institutions to establish a data security responsibility system and implement data security protection management requirements.Formulate data classification and classification protection systems, establish data catalogs and classification hierarchical specifications, dynamically manage and maintain data directory, and adopt differentiated security protection measures.At the same time, bank insurance institutions are required to strengthen data security management and establish a data security technology protection system under diverse heterogeneous environments such as big data, cloud computing, mobile Internet, and the Internet of Things.