[Southern Metropolis Daily] Chen Xiaohong, CPPCC Member: Set up Emergency Data Analysis and Decision-making Team to Deal with Security Emergencies
2020-05-24
Although the rapid development of the new generation of information technology, such as big data, AI, etc., provide the convenience, we often encounter personal information disclosure and other problems. How to balance industrial development and personal information protection has become a focus issue.
Recently, Chen Xiaohong, CPPCC Member, CAE Academician and President of HUTB, said in an exclusive interview with Southern Metropolis Daily that space should be reserved for business and technological innovation on the premise of strict protection of personal information.
She also stressed that the protection of personal information should highlight the innovation of mechanism and technology, give full play to the enthusiasm of enterprises, realize better and more scientific allocation of resources by virtue of marketable cooperation mechanism, and effectively build a“firewall”for personal information protection.
Chen Xiaohong, CPPCC Member, CAE Academician and President of HUTB
·· 1 ··
Disclosure of epidemic information is not equal to disclosure of privacy
Southern Metropolis Daily: During the epidemic, what problems have been exposed by the repeated disclosure of personal information?
Chen Xiaohong: During the epidemic, the personal information of patients and related personnel was constantly forwarded and leaked on WeChat, Microblog and other platforms, which not only revealed the serious inconsistency between the public's right to know and the protection of personal privacy,
but also reflected the urgent need to strengthen personal information protection in the era of big data. However, the maintenance of information security is still a long way to go. Disclosure of epidemic information is not equal to disclosure of privacy. Regions should standardize the epidemic prevention and control and enforce the law in accordance with the actual situation and under the spirit of the rule of law, in order to avoid the personal information disclosure.
In order to effectively deal with major national security emergencies, e.g. the novel coronavirus pneumonia epidemic, I suggested that an emergency data analysis and decision-making team should be established for all relevant data (satellite remote sensing, mobile phone location, network public opinion, traffic logistics, etc.) and analysis needs (material and personnel assignment) of natural disaster, accident, public health, social security and other municipal public crisis events to carry out long-term and stable emergency support work on the premise of data confidentiality.
Southern Metropolis Daily: The personal information disclosure also occurs in other fields. How to completely solve the problems?
Chen Xiaohong: First of all, departments should cooperate to improve the personal information protection mechanism. Due to a wide range of subjects and interests, the government administration, legislation and justice, market enterprises, individuals and other related subjects should form an overall governance network structure with a combination of economic, legal, technical and other means to realize the all-round protection of personal information.
In addition to the formulation of laws and regulations, it is necessary to clarify the control right and ownership of personal information, strengthen the personal privacy protection and data security management, set up the accountability mechanism for the collection and use of personal information, crack down on the personal information disclosure in strict accordance with the law, reduce the risk of improper handling of personal information, and improve the professional level of handling criminal cases of the personal information infringement.
·· 2 ··
New technologies not only bring disclosure risk, but also provide new protection means
Southern Metropolis Daily: In terms of the digital industry, what new technologies have brought challenges to personal information protection?
Chen Xiaohong: With the arrival of the intelligent era, people enjoy intelligent life in different scenes, while the privacy security problems are followed. It can be said that new generation of information technologies, such as big data, AI, blockchain, etc., not only increase the possibility of personal information disclosure, but also provide new means for personal information protection.
In China, there is no lack of legal provisions for the personal information protection of citizens. In fact, a legal framework for the personal information protection has been initially established with the Network Security Lawas the core. The real problem is that many people do not have enough cognition and awareness of the personal data protection, and lack of intuitive feelings and enough attention to the possible impact of the development of AI on the personal privacy protection. Therefore, some enterprises collect and use the personal data to provide convenient services.
As an important driving force of the new round of scientific and technological revolution and industrial transformation, AI is profoundly affecting the social life and changing the development pattern. In case of improper application, AI may bring ethical risks of privacy disclosure. Therefore, an important issue to be solved is how to give consideration to the privacy protection in the development of AI and ensure the safety, reliability and controllability of the personal information.
Southern Metropolis Daily: How to balance the personal information protection with the development of new technology?
Chen Xiaohong: To balance the personal information protection, we should follow the guide of government, take actions according to the law, make the technical breakthrough and access to the market.
Above all, China's personal information protection legislation should not“be put off easily by a slight risk", but should make room for commercial and technological innovation on the premise of strict protection of personal information. In addition, the legislation should improve the judicial system to strengthen the personal information protection, raise the law enforcement level of crime cases of the personal information, and strictly abide by the bottom line of citizens' personal and property security.
Secondly, the innovation of personal information protection mechanism and technology should be emphasized, so that data users can better serve individuals, enterprises and society without infringing privacy. This not only needs the attention and promotion of government, but also the enthusiasm of enterprises. The government should actively use the market-oriented operation mechanism to find ways to stimulate the role of the market in the allocation of innovation resources, thus achieving a better and more scientific allocation of the whole society's personal information protection innovation resources, and effectively building a“firewall”for the personal information protection.
Furthermore, it is necessary to seek new interest growth point in the protection and utilization of personal information. The personal information security service market has a huge market prospect. At present, there are more hardware and software, and fewer services in China's information security market. With the emergence of cloud computing, IoT, big data, 5G and other technologies, the security boundary of personal information weakens, and the contents of security protection increase, which poses a huge challenge to personal information security and data security, and opens a new incremental space for the personal information security market.
·· 3 ··
Data opening: Opening and sharing at different levels for users
Southern Metropolis Daily: What do you think of China's legislative progress of personal information protection?
Chen Xiaohong: At the CPPCC's Online Political Consultative Conference held in January this year, our participants agreed that the Central Committee of the CPC paid more attention to the personal information protection in the era of big data, completed a lot of work and achieved positive results. However, the traditional personal information protection system and method cannot keep up with the new situation of widespread popularity of Internet and rapid development of digital industry. At present, China's personal information protection legislation still faces the following challenges:
On the one hand, with the development of big data, AI and other new technologies, personal information collection channels are more and more widely used, and the task of personal information protection is more arduous. In addition, new needs and problems emerged in the era of big data also increase the difficulty of the personal information protection legislation.
On the other hand, there are contradictions between the right protection law and administrative law, and there are some conflicts between the personal information protection law and other relevant laws and regulations. Personal information protection law involves multi interest groups, which affects the transparency of information disclosure, so it is necessary to further study how to achieve the balance between personal interests, commercial interests and public interests.
Furthermore, the imperfect information sharing mechanism among government departments and the non-uniform supervision platform of personal information protection are easy to cause the duplicate law enforcement, repeated law enforcement and other problems.
Southern Metropolis Daily: Some people believe that the development of big data related industries will be accelerated if the government and giant enterprises are willing to open data. What do you think?
Chen Xiaohong: The development of an industry, especially the development of big data related industries, involves many factors, such as policies and regulations, technical innovation, resource allocation, and talents, etc. It is necessary to cooperate with perfect laws and regulations while opening and sharing data to promote the orderly, healthy and sustainable development of big data related industries.
If the government and giant enterprises block the source of big data, it will slow down the social data flow, even damage the national and social interests, and big data research and industry development will face“dilemma". Therefore, data opening should not be“completely eradicated", and different levels of data opening and sharing should be carried out according to the credit background of data users, use objectives and data security level.
Besides, an enterprise service system with data opening and sharing can be formed. Enterprises with good credit and technical strength can provide data services for downstream enterprises through data analysis and data protection technologies.
Finally, it is necessary to guarantee the rational use of data. To this end, all departments need to work together to build a data information protection mechanism and improve the judicial system of the data information protection. In the case of data disclosure, there should be appropriate emergency measures, remedies and strict accountability system.
ByYou Yiwei, Researcher of ND Personal Information Security Research Center
