T/SDBDA 16-2021 The data security specifications for the agricultural technology promotion information application demonstration platform

Scope

Main Technical Content: 4 Overview of the Various Stages of the Data Life Cycle This document defines five stages of the data life cycle and describes them based on data characteristics and scenarios: a) **Data Collection**: The stage of new data generated within the system and data collected from external systems. b) **Data Transfer**: The stage of data flowing from one entity to another via a network. c) **Data Storage**: The stage of data being physically or cloud-stored in any digital format. d) **Data Exchange**: The stage of data sharing, opening, and exchanging between organizations and individuals. e) **Data Retirement**: Data that is no longer processed enters the data retirement stage, involving archiving, transferring, discarding, destroying information, and destroying storage media. The specific life cycle of data is determined by actual business scenarios, and not all data will fully experience all six stages. 5 General Security The data security system is divided into three parts: data life cycle security, general security, and security supervision. - **Data Life Cycle Security** and **General Security** refer to common security technologies and management measures applicable to all stages of the data life cycle. - **Security Supervision** are safety supervision measures proposed from the perspective of data supervision authorities. 6 Personal Information Protection For compliance requirements related to personal information protection, establish an overall data security strategy plan for the organization. The content of the data security strategy plan should cover the security risks throughout the entire data life cycle. Management authorities should: a) Define a comprehensive data security strategy that aligns with the organization's data strategy, clarify security policies, objectives, and principles; b) Based on the organization's overall data security strategy, establish data-centric security systems and procedure

Development Information

Related Standards