Author: Li Sanxi (professor of the School of Economics of Renmin University of China and director of the Digital Economy Research Center) Wu Yufan (doctoral candidate of the School of Economics of Renmin University of China) recently, the Ministry of Industry and Information Technology and other 16 departments jointly issued the Guiding Opinions on Promoting the Development of Data Security Industry (hereinafter referred to as the Opinions). The Opinion points out that the data security industry is an emerging business form that provides technology, products and services to ensure that data continues to be in an effective protection, legal use and orderly flow state. It should not only meet the needs of data processors to fulfill the obligations of data security protection, but also meet the needs of promoting the development and utilization of data resources and activating the value of data elements, which provides ideas and guidance for the high-quality development of the data security industry in the next step. At present, data, as a new factor of production, is rapidly integrating into all aspects of economic society. Data security is the key to ensure the orderly development and utilization of data element assets and promote the healthy development of the digital economy. The report of the 20th National Congress of the Communist Party of China has made a clear plan for strengthening the construction of network, data and other security systems. With the successive issuance of policy documents and laws and regulations such as the Network Security Law, the Personal Information Protection Law, the Data Security Law and the "Twenty Articles of Data", the system construction of data security has become more perfect, effectively reducing the risk of imbalance between data security protection and development and utilization, and constantly stimulating data production and promoting data circulation on the premise of maintaining national data security, protecting personal information and business secrets Optimize the data distribution, improve the data security awareness of the whole people, promote the data security industry to usher in a comprehensive and rapid development, and guarantee the new development pattern with the new security pattern. Strengthen data security protection and enhance the people's sense of security. With the increasingly prominent value of data, data security incidents such as personal information leakage and threats to personal life and property security have become more frequent, which has led to a rapid increase in the importance of personal information protection and data security worldwide. Consumers' demand for the protection of personal sensitive information and other data is increasingly strong. The relevant data security industry can take this opportunity to actively develop customized personal data security protection products and fully protect the data rights and interests of individuals, organizations and other stakeholders. The "data 20" points out that it is necessary to "improve the mechanism that the data elements are evaluated by the market and determined by their contributions" and "focus on protecting the input-output income of each participant of the data elements according to the principle of" who inputs, who contributes and who benefits ". Improving the rights and interests protection mechanism is conducive to enhancing consumers' willingness to develop and utilize personal data. Data security enterprises should also focus on optimizing and developing data processing technologies such as data recognition and data desensitization, so as to better meet the development and utilization needs of massive consumer personal data. Strengthen data security protection and constantly promote the development of industry norms. In terms of data security protection, the data security law puts forward the obligation to ensure data security for organizations or individuals carrying out data activities, that is, enterprises that own or process data need to be responsible for the data and data security generated by their collection, which makes the data security service-related requirements