In order to regulate data processing activities in the field of natural resources, strengthen data security management, ensure data security, and promote the development and utilization of data, the Ministry of Natural Resources recently issued the Measures for the Management of Data Security in the Field of Natural Resources (hereinafter referred to as the "Measures"), requiring the Ministry of Natural Resources, the State Forestry and Grassland Administration, and local industry regulatory departments to incorporate data security into the national security responsibility system of Party committees (Party groups), in accordance with the principle of "who is in charge of business, who is in charge of data, and who is in charge of data security" to implement the responsibility for data security guidance and supervision in the industry, region, and field. The Measures make it clear that data in the field of natural resources refers to the data collected and generated in the course of natural resource activities, mainly including geographic information data such as basic geographic information and remote sensing images, survey and monitoring data of natural resources such as land, minerals, forests, grasslands, water, wetlands, and sea islands, land and spatial planning data such as overall planning, detailed planning, and special planning, and natural resource management data such as use control, asset management, cultivated land protection, ecological restoration, development and utilization, and real estate registration. In terms of data classification and hierarchical management, the Measures clarify that the Ministry of Natural Resources shall organize the formulation of standards and specifications for the classification and grading of data in the field of natural resources, the identification and identification of important data and core data, and data security protection, and guide the implementation of data classification and hierarchical management, and the compilation of important data and core data catalogs in the industry and the implementation of dynamic management. The State Forestry and Grassland Administration is to compile data security standards and specifications in the field of forestry and grassland in accordance with the standards and specifications for the classification and grading of data in the field of natural resources, and in combination with the needs of work, to guide the classification and grading of forest and grassland data, to compile important data and core data catalogs of forests and grasslands, and to implement dynamic management. In accordance with the standards and norms for the classification and grading of data in the field of natural resources, local industry regulatory departments are to separately organize and carry out the classification and hierarchical management of data in the field of natural resources in the region and the identification and review of important data and core data, compile a catalog of important data and core data in the field of natural resources in the region, and report to the Ministry of Natural Resources, and where there is a change in the catalog, it shall be promptly reported and updated. In terms of data lifecycle security management, the Measures clarify that data processors shall bear the main responsibility for the security of data processing activities, implement hierarchical protection for all types of data, and if different levels of data are processed at the same time and it is difficult to take protective measures separately, the protection shall be implemented in accordance with the requirements of the highest level. Establish a data security management system, and formulate specific hierarchical protection requirements and operating procedures for each link of the data life cycle for different levels of data. In the process of data life cycle processing, data processing, permission management, personnel operation and other logs are recorded, and commercial cryptography technology is used to protect the integrity of the logs. In terms of data security monitoring, early warning and emergency management, the Measures require organizations to establish data security risk monitoring mechanisms and early warning systems in the field of natural resources, classify data security risks and incident levels, organize the construction of data security monitoring and early warning technical means, form monitoring, traceability, early warning, disposal and other capabilities, and strengthen information sharing with relevant departments.
Notice of the Ministry of Natural Resources on Printing and Distributing the "Measures for the Management of Data Security in the Field of Natural Resources".
Natural Resources Development [2024] No. 57
The competent departments of natural resources of all provinces, autonomous regions and municipalities directly under the Central Government, the Bureau of Natural Resources of the Xinjiang Production and Construction Corps, the Shanghai Municipal Oceanic Bureau, the Fujian Provincial Oceanic and Fishery Bureau, the Shandong Provincial Oceanic Bureau, the Guangxi Zhuang Autonomous Region Oceanic Bureau, the State Forestry and Grassland Administration, the China Geological Survey and other units directly under the Ministry, all dispatched agencies, and all departments and bureaus of the ministry:
With the approval of the National Data Security Work Coordination Mechanism and the consent of the Ministry leaders, the "Measures for the Management of Data Security in the Field of Natural Resources" are hereby issued to you, and you are requested to conscientiously implement them in light of actual conditions.
Ministry of Natural Resources
March 22, 2024
Please indicate the source for reprinting
Source: China Natural Resources News
Reporter: Qiao Siwei
Text editor: Wang Zhongjian
New Media Editor: Qu Bingjie (Trainee)
iNatural omnimedia
Please mark the source in a conspicuous position for reprinting: iNature All Media
iEmail: [email protected]
Phone: 010-68047618
👇