Promulgated by: Cyberspace Administration of China (国家互联网信息办公室), People’s Bank of China (中国人民银行), National Financial Regulatory Administration (国家金融监督管理总局), China Securities Regulatory Commission (中国证券监督管理委员会), National Bureau of Statistics (国家统计局) and State Administration of Foreign Exchange (国家外汇管理局).
Document No.: not stated in the released text.
Issued June 13, 2026. No separate effective date is stated in the text.
Translation note — DCC. Translated in full from the official Chinese text of the Guide as released by the six issuing authorities (24 pages: main text sections 1–6, Appendix A and Appendix B). The released text carries no issuing notice or document number. The multi-column catalogue tables in the appendices have been reconstructed as markdown tables, with every row translated. The Guide applies the national standard GB/T 43697-2024, Rules for Data Classification and Grading to the financial-information-services sector and sits alongside the PBOC Data Security Measures in the financial data-security regime. Terminology follows DCC’s bilingual glossary.
1 Purpose and basis
This document is formulated in order to regulate financial information services data processing activities and raise the level of financial information services data security, in accordance with the Cybersecurity Law of the People’s Republic of China, the Data Security Law of the People’s Republic of China, the Personal Information Protection Law of the People’s Republic of China, the Regulation on Network Data Security Management, the Provisions on the Administration of Financial Information Services (金融信息服务管理规定) and other laws, regulations, rules and policy provisions, and with reference to the national standard GB/T 43697-2024, Data Security Technology — Rules for Data Classification and Grading.
2 Scope of application
This document sets out the rules for the classification and grading of financial information services data. It applies to the data classification and grading and important-data identification work carried out by financial information service providers engaged in financial information services within the territory of the People’s Republic of China.
This document does not apply to data involving State secrets or to military data.
3 Terms and definitions
3.1 Financial information services (金融信息服务)
Services that provide, to users engaged in financial analysis, financial trading, financial decision-making or other financial activities, information and/or financial data that may affect financial markets.
Note: Quoted from the Provisions on the Administration of Financial Information Services. Financial information services are distinct from news agency services.
3.2 Financial information services data (金融信息服务数据)
Data collected and generated in the course of carrying out financial information services.
3.3 Financial information service provider (金融信息服务提供者)
A legal person or unincorporated organization engaged in financial information services.
Note: Does not include State organs or organizations authorized by laws or regulations to perform functions of managing public affairs.
3.4 Important data (重要数据)
Data in a specific field, concerning a specific group or a specific region, or reaching a certain precision and scale, which, once leaked, tampered with or destroyed, may directly endanger national security, economic operation, social stability, or public health and safety.
Note: Data that affects only the organization itself or individual citizens is generally not treated as important data.
3.5 Core data (核心数据)
Important data that has relatively high coverage of a field, group or region, or reaches a relatively high precision, a relatively large scale or a certain depth, and which, once illegally used or shared, may directly affect political security.
Note: Core data mainly includes data concerning key fields of national security; data concerning the lifelines of the national economy, important aspects of people’s livelihood and major public interests; and other data determined to be core data upon assessment by the relevant State departments.
3.6 Sensitive general data (敏感一般数据)
Data which, once leaked, tampered with or destroyed, has a certain impact on economic operation, social stability or the public interest, or causes a significant impact on the organization itself or on individual citizens.
3.7 Ordinary general data (常规一般数据)
Data other than core data, important data and sensitive general data.
4 Data classification rules
Financial information services data may be classified according to its business attributes. The first-level classification comprises 3 categories — business data, user data and enterprise data — which are further subdivided into 9 second-level categories and 67 third-level categories, as detailed in Appendix A.
a) Business data (first-level category) is divided into 5 second-level categories — financial market data, macroeconomic data, organization data, industry indicator data, and news and report data — which are further subdivided into 52 third-level categories such as stock data, bond data, fund data, foreign exchange data, commodity data and wealth management data.
-
Financial market data (second-level category): data reflecting financial market dynamics and the condition of assets, such as basic information, quotation data and statistical data on stocks, bonds and funds.
-
Macroeconomic data (second-level category): indicator data reflecting the state of economic operation of a country or region, such as statistical data relating to national accounts, price indices, trade, investment, finance, public finance, and employment and wages.
-
Organization data (second-level category): basic information and operating data of financial market participants (such as listed and bond-issuing enterprises and financial institutions), such as operating information, employee information and financial information.
-
Industry indicator data (second-level category): indicator data reflecting the operating state, market supply and demand and the like of industry sectors, such as industry-chain data and supply-and-demand data for the agriculture, forestry, animal husbandry and fishery sector and for the energy sector.
-
News and report data (second-level category): news, commentary, information and other content related to financial markets, such as industry news, research reports, policies, laws and regulations, and expert opinions.
b) User data (first-level category) is divided into 2 second-level categories: individual user data and institutional user data. Individual user data is divided into 3 third-level categories — basic information, transaction data, and biometric identification information; institutional user data is divided into 2 third-level categories — basic information and transaction data.
c) Enterprise data (first-level category) is divided into 2 second-level categories: operations and management data, and system operation and maintenance data. Operations and management data is divided into 6 third-level categories — financial data, settlement management data, human resources data, marketing data, risk control and supervision data, and other operations and management data; system operation and maintenance data is divided into 4 third-level categories — configuration data of network equipment and information systems, log data, security monitoring data, and security incident data.
5 Data grading rules
5.1 Data grading framework
According to the degree of importance and the degree of sensitivity of financial information services data in economic and social development, and the degree of harm caused to national security, economic operation, social order, the public interest, the rights and interests of organizations, and the rights and interests of individuals once the data is leaked, tampered with or destroyed, or illegally obtained, illegally used or illegally shared, data is divided, from high to low, into four grades: core data, important data, sensitive general data and ordinary general data.
5.2 Grading factors
The factors affecting data grading mainly include the data’s coverage, time span, precision, disclosure status and geographic scope.
a) Coverage: the distribution or density of the data’s coverage of a field, group, region or the like — for example, the proportion of a region covered or the proportion of a group covered.
b) Time span: the period of time to which the data belongs — for example, 10 years of fund trading-volume data or 5 years of national economic data.
c) Precision: the degree of exactness or accuracy of the data, including numerical precision, spatial precision and temporal precision — for example, cyclical price-change data for a category of commodity that is more precise and detailed than that publicly released by the relevant departments.
d) Disclosure status: disclosed or undisclosed. “Disclosed” means the data can be accessed and obtained by the public. “Undisclosed” means the data can be accessed and obtained only by a specific range of organizations or individuals and has not been opened to the public.
e) Geographic scope: whether the data reflects economic, social or other conditions within or outside the territory of China.
5.3 Affected objects
The objects that may be affected when the data faces a security risk, mainly comprising national security, economic operation, social order, the public interest, the rights and interests of organizations, and the rights and interests of individuals.
a) National security: affecting the security of national interests such as the State’s political, military, economic, scientific and technological, and resource interests.
b) Economic operation: affecting economic operating mechanisms such as the order of operation of the market economy, the macroeconomic situation, the lifelines of the national economy, aggregate social supply and aggregate demand, and the economic development of an industry or region.
c) Social order: affecting social order such as public security and public safety, the order of daily social life, people’s livelihood and well-being, the rule of law, and ethics and morality.
d) Public interest: affecting public interests such as the public’s use of public services, public facilities and public resources, or public health and safety.
e) Rights and interests of organizations: affecting the rights and interests of the organization itself or of other organizations, such as production and operations, reputation and image, public credibility and intellectual property.
f) Rights and interests of individuals: affecting the rights and interests of natural persons, such as personal rights, property rights, the right to privacy, and personal information rights and interests.
5.4 Degree of impact
The degree of impact is the degree of impact that may be caused once the data is leaked, tampered with or destroyed, or illegally obtained, illegally used or illegally shared. From high to low, the degree of impact is divided into especially serious harm, serious harm and general harm.
Table 1 — Criteria for determining the degree of impact
| Affected object | Degree of impact | Criteria for determination (any one condition suffices) |
|---|---|---|
| National security | Especially serious harm | Directly affects the State’s political security. |
| National security | Serious harm | Concerns key fields of national security, or poses a serious threat to political, military, economic, scientific and technological, resource or other security. |
| National security | General harm | Poses a threat to political, military, economic, scientific and technological, resource or other security. |
| Economic operation | Especially serious harm | (1) Directly affects the security of the economic interests of important industries and key fields concerning the lifelines of the national economy, such as industries providing important public goods or important resource industries; (2) directly affects the security of key industries, major infrastructure, major construction projects and other major economic interests concerning the lifelines of the national economy; (3) causes especially serious harm to the economic development, business production, technological progress or industrial ecosystem of one or more industry sectors — for example, causes major damage to important backbone enterprises in pillar industries or high and new technology industries, leading to large-scale business interruption or loss of large amounts of business processing capacity; (4) causes especially serious harm to the economic operation of one or more provincial-level administrative regions — for example, leads to large-scale suspension of work and production, or prolonged interruption of the operation of large-scale infrastructure. |
| Economic operation | Serious harm | (1) Directly affects the state and development trend of macroeconomic operation, such as aggregate social supply and aggregate demand, gross national economic output and its growth rate, the main proportional relationships of the national economy, the general price level, the overall level of employment and the unemployment rate, the total scale and growth rate of currency issuance, and the total scale of and changes in import and export trade; (2) directly affects one or more municipal-level administrative regions, multiple enterprises within an industry, or a large number of users, causing serious impact on industry development, technological progress and the industrial ecosystem, or directly affects the core competitiveness, core business operations, key industry chains or core supply chains of an industry sector. |
| Economic operation | General harm | (1) Causes general harm to the development, business operations, technological progress or industrial ecosystem of a single industry sector — for example, where the number of affected users and enterprises is small, the production and living area affected is small, the duration is short, and the negative social impact is small; (2) causes general harm to the economic operation of a single industry sector or region. |
| Social order | Especially serious harm | (1) Directly affects social stability in one or more provincial-level administrative regions (such as a major mass incident), seriously affecting the normal functioning of society; (2) causes especially serious harm to matters, supplies, works or projects that safeguard important aspects of people’s livelihood. |
| Social order | Serious harm | (1) Seriously affects the order of daily life of the people, or public administration and service functions, in one or more municipal-level administrative regions; (2) seriously affects the production order or business order of one or more industries. |
| Social order | General harm | Affects the production order or business order of one or more organizations. |
| Public interest | Especially serious harm | (1) Concerns major public interests, leading to the long-term, large-area paralysis of the supply of public social resources across most areas of one or more provincial-level administrative regions, such that a large range of members of society (for example, more than 10 million people) are unable to use public facilities, obtain open data resources or receive public services; (2) leads to an especially major cybersecurity and data security incident, causing especially serious impact on the public interest, with very large negative social impact. |
| Public interest | Serious harm | (1) Leads to a relatively prolonged interruption of the supply of public social resources in one or more municipal-level administrative regions, such that a relatively large range of members of society (for example, more than 1 million people) are unable to use public facilities, obtain open data resources or receive public services; (2) leads to a major cybersecurity and data security incident, causing serious impact on the public interest, with large negative social impact. |
| Public interest | General harm | Causes temporary, small-scale impact on public facilities, open data resources, public services or the like. |
| Rights and interests of organizations | Especially serious harm | (1) Causes serious impact on the organization’s business production and operations; (2) causes especially serious impact on business development and economic performance, such that important or key business cannot be carried out normally; (3) causes major economic or technological losses, seriously damages the institution’s reputation, or leaves the enterprise facing bankruptcy. |
| Rights and interests of organizations | Serious harm | (1) Causes serious impact on the organization’s reputation and image, intellectual property, or interests in fair competition; (2) results in some business being unable to be carried out normally, causes relatively large economic or technological losses, or damages the institution’s reputation. |
| Rights and interests of organizations | General harm | (1) Causes general impact on the organization’s reputation and image, intellectual property, or interests in fair competition; (2) causes slight impact on the organization’s production and operations, business development or economic performance. |
| Rights and interests of individuals | Especially serious harm | Causes major impact on an individual’s personal dignity, personal safety or property safety that cannot be eliminated. |
| Rights and interests of individuals | Serious harm | Causes major impact on an individual’s personal dignity, personal safety or property safety that requires a relatively high cost to eliminate. |
| Rights and interests of individuals | General harm | Causes the individual a certain degree of trouble that can be overcome — for example, incurring additional costs, being unable to use a service that should be provided, or being misled. |
5.5 Comprehensive determination of the grade
On the basis of identifying the grading factors and analyzing the affected objects and the degree of impact, the data grade shall be determined comprehensively. The grade of a dataset may, on the basis of the grades of its data items and in accordance with the principle that the higher and stricter grade governs, be set at the highest grade among the data items the dataset contains. In addition, data that is identified as core data or important data under the data classification and grading standards or specifications of a relevant department or region; data that a relevant department or region has notified, or publicly released, as core data or important data; or data that a relevant enterprise or institution has advised has been determined by a relevant department or region to be core data or important data, shall be graded as core data or important data accordingly.
Table 2 — Criteria for determining the data grade
| Affected object | Especially serious harm | Serious harm | General harm |
|---|---|---|---|
| National security | Core data | Core data | Important data |
| Economic operation | Core data | Important data | Sensitive general data |
| Social order | Core data | Important data | Sensitive general data |
| Public interest | Core data | Important data | Sensitive general data |
| Rights and interests of organizations; rights and interests of individuals | Sensitive general data | Sensitive general data | Ordinary general data |
Note: Where the rights and interests of individuals or organizations are affected on a large scale, the affected objects may not be limited to the rights and interests of individuals or organizations; national security, economic operation, social order or the public interest may also be affected.
5.6 Dynamic updating of grades
After data grading is completed, it shall be checked and reviewed regularly. Where the business attributes, degree of importance or degree of potential harm of the data change, the grade shall be updated promptly, including but not limited to in the following circumstances:
a) the data content changes, such that the originally determined data grade is no longer applicable;
b) the data content has not changed, but changes in the data’s timeliness, scale, use scenarios, processing methods or the like mean that the originally determined data grade is no longer applicable;
c) data fusion means that the originally determined data grade is no longer applicable;
d) requirements of the State or of the relevant departments mean that the originally determined data grade is no longer applicable;
e) other circumstances in which the data grade needs to be updated.
6 Data classification and grading procedure
Data processors may carry out data classification and grading in the following steps:
a) Data resource inventory:
-
conduct a comprehensive inventory of the organization’s data resources, including database tables, data items and data files;
-
clarify the basic information, described objects, business attributes and the like of the data resources, and form a data resource inventory.
b) Data classification:
-
determine the first-level category according to the object the data describes;
-
determine the second-level category according to the business field to which the data belongs, the data subject and the like;
-
determine the third-level category according to the industry line, key business, management and use involved.
c) Data grading:
By identifying and analyzing the grading factors, comprehensively assess the data’s impact on national security, economic operation, social order, the public interest, the rights and interests of organizations and the rights and interests of individuals, and grade the data.
d) Forming the data classification and grading list:
-
review and confirm the data classification and grading results;
-
form the data classification and grading list and the catalogue of important data.
e) Submitting the catalogue of important data:
Submit the catalogue of important data to the competent authority at the required frequency and in the required format; the catalogue format is set out in Appendix B.
f) Dynamic update management:
Regularly review the data resources and the state of data classification and grading, and promptly update the data classification and grading list and the catalogue of important data. Where core data or important data undergoes a major change (such as a change of 30% or more in the number of important-data entries, the total storage volume or the like, or a change in other important content), the catalogue of important data shall be promptly re-submitted.
Appendix A — Examples of the classification and grading of financial information services data
| Level 1 category | Level 2 category | Level 3 category | Data description and examples | Reference minimum grade |
|---|---|---|---|---|
| Business data | Financial market data | Stock data | Stock business data of securities exchange markets, including basic stock information, trading quotations, shareholders and share capital, announcements and similar data — for example stock issuance information, industry sector, shareholder information, real-time prices, trading volume, turnover, intraday (time-sharing) data, candlestick (K-line) data, stock dividends, and announcements of major events. | Ordinary general data. |
| Business data | Financial market data | Bond data | Bond business data for bonds issued on securities exchange markets and over-the-counter markets, including basic bond information, market data, issuer information, announcements and similar data — for example bond issuance and listing information, real-time prices, trading volume, turnover, interest payment and redemption information, credit ratings, guarantee status, valuation information, quotation data, yield curves, issuers, intermediaries, credit-reporting agencies, and announcements of major events. | Ordinary general data. |
| Business data | Financial market data | Fund data | Business data of publicly offered and privately offered funds, including basic fund information, quotation data, issuing institutions, fund managers, announcements and similar data — for example fund quotations, net asset value, real-time prices, trading volume, turnover, subscription and redemption lists, private fund managers, and private fund product registration and filing information. | 1. Undisclosed private fund data is sensitive general data; 2. other data is ordinary general data. |
| Business data | Financial market data | Foreign exchange data | Foreign exchange data on currencies, including foreign exchange quotation data, benchmark data, market statistics and similar data — for example interest rates, exchange rates, trading statistics, spot monthly reports, and non-deliverable forward data. | 1. Foreign exchange data involving the renminbi is sensitive general data; 2. other data is ordinary general data. |
| Business data | Financial market data | Commodity data | Commodity trading data, including basic commodity information, quotation data, supply data, demand data, inventory data, cost and profit data and similar data — for example commodity price data, rankings by trading volume and open interest, demand volumes, enterprise inventories, production costs, logistics freight rates and fees. | 1. Commodity data whose coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and which can reflect conditions at the level of a provincial-level administrative region or above is important data; 2. other data is sensitive general data. |
| Business data | Financial market data | Futures and options | Futures and options market data, including basic information and quotation data on futures and options — for example contract variety data, trading volume, turnover, open interest, monthly contract data, processed contract data, rankings by trading volume and open interest, price-limit (limit-up and limit-down) prices, and risk indicators. | 1. Real-time futures prices, and data such as trading volume and turnover that reflect market activity, are sensitive general data; 2. other data is ordinary general data. |
| Business data | Financial market data | Wealth management data | Wealth management product and market data, covering bank wealth management, annuities and pensions, insurance asset management, private funds, futures asset management, segregated fund accounts, trust products, insurance products and the like — for example product prospectuses, product scale, product net asset value, quarterly holdings, asset allocation, basic information on wealth management companies, and information on major shareholders and management. | 1. Undisclosed data is sensitive general data; 2. disclosed data is ordinary general data. |
| Business data | Financial market data | Index data | Data relating to financial market indices, including basic information, index constituents, index quotations, valuations and similar data on the world’s major indices. | Ordinary general data. |
| Business data | Macroeconomic data | National accounts | Statistical indicators reflecting the overall economic activity of countries and regions over a given period, such as gross domestic product (GDP), gross national income (GNI) and value added by industry. | 1. Domestic national accounts data is sensitive general data; 2. overseas national accounts data is ordinary general data. |
| Business data | Macroeconomic data | Price indices | Economic indicators reflecting the direction, trend and degree of change in the price level of a basket of goods (or services) in countries and regions over different periods, such as the consumer price index (CPI), the producer price index (PPI), the corporate goods price index (CGPI) and the consumer price index (ICPI). | 1. Domestic price index data is sensitive general data; 2. overseas price index data is ordinary general data. |
| Business data | Macroeconomic data | Trade | Domestic and foreign trade data disclosed by the governments of countries and regions and by international organizations, such as total retail sales of consumer goods, retail sales of goods by enterprises above the designated size, operating conditions of accommodation and catering enterprises above the designated size, online retail sales, retail sales of services, total imports and exports, trade balance and degree of external dependence. | 1. Domestic trade data is sensitive general data; 2. trade data of other overseas countries/regions is ordinary general data. |
| Business data | Macroeconomic data | Investment | Investment data disclosed by the governments of countries and regions and by international organizations, such as fixed-asset investment, private investment, government investment, foreign investment and outbound investment. | 1. Investment data of domestic institutions within and outside China, and of overseas institutions within China, is sensitive general data; 2. investment data of overseas institutions outside China is ordinary general data. |
| Business data | Macroeconomic data | Finance | Financial data disclosed by the governments of countries and regions and by international organizations, such as money supply, central bank and commercial bank balance sheets, and credit-market debt data. | 1. Domestic financial data is sensitive general data; 2. overseas financial data is ordinary general data. |
| Business data | Macroeconomic data | Public finance | Fiscal data disclosed by the governments of countries and regions, such as total fiscal revenue and expenditure, and fiscal budgets and final accounts (the general public budget, the government-managed fund budget, the state-owned capital operations budget and the social insurance fund budget). | 1. Domestic fiscal data is sensitive general data; 2. overseas fiscal data is ordinary general data. |
| Business data | Macroeconomic data | Employment and wages | Employment data disclosed by the governments of countries and regions and by international organizations, such as labor force, employed population, employment rate, unemployed population, unemployment rate, wages of employed persons and minimum wage standards. | 1. Domestic employment and wage data is sensitive general data; 2. overseas employment and wage data is ordinary general data. |
| Business data | Macroeconomic data | People’s livelihood | Data on people’s living standards disclosed by the governments of countries and regions and by international organizations, such as household income and expenditure, per capita disposable income, per capita consumption expenditure, personal savings and the Gini coefficient. | 1. Domestic people’s livelihood data is sensitive general data; 2. overseas people’s livelihood data is ordinary general data. |
| Business data | Macroeconomic data | Population and resources | Population data and resource and environment data disclosed by the governments of countries and regions and by international organizations, such as total population, total population by sex, total population by age group, population projections, administrative division statistics, forest resources, land resources, mineral resources, pollutant discharge and treatment, and natural disasters. | 1. Domestic population and resource data is sensitive general data; 2. overseas population and resource data is ordinary general data. |
| Business data | Macroeconomic data | Education and science and technology | Education data and data relating to national high and new technology disclosed by the governments of countries and regions and by international organizations, such as the number of schools of all levels and types, number of teaching and administrative staff, number of full-time teachers, enrollment numbers, number of students in school, number of graduates, enrollment rates, and science and technology patents. | 1. Domestic education and science and technology data is sensitive general data; 2. overseas education and science and technology data is ordinary general data. |
| Business data | Macroeconomic data | Business climate surveys | Business climate survey data disclosed by the governments of countries and regions and by international organizations, such as the consumer confidence index, the purchasing managers’ index (PMI), the investment confidence index and the economic activity index. | 1. Domestic business climate survey data is sensitive general data; 2. overseas business climate survey data is ordinary general data. |
| Business data | Macroeconomic data | Balance of payments | Balance of payments data disclosed by the governments of countries and regions, such as foreign exchange reserves, the current account, the capital account and the financial account. | 1. Domestic balance of payments data is sensitive general data; 2. balance of payments data of other overseas countries/regions is ordinary general data. |
| Business data | Organization data | Operating information | Operating data and related-party transaction data, such as enterprise sales data, customer service data, loan scale, non-performing ratio data, goods and services data, interbank lending, shareholding structure, announcements of major events, operating conditions and financing information. | 1. Undisclosed data is sensitive general data; 2. disclosed data is ordinary general data. |
| Business data | Organization data | Employee information | Information on management and core personnel, such as the positions held by enterprise managers, concurrent positions held by core technical personnel, and executive shareholding and remuneration data. | 1. Undisclosed data is sensitive general data; 2. disclosed data is ordinary general data. |
| Business data | Organization data | Financial information | Financial statement information and audit information, such as enterprise balance sheet, income statement and cash flow statement data, and audit data issued by accounting firms, such as the matters audited and the audit opinion. | 1. Undisclosed data is sensitive general data; 2. disclosed data is ordinary general data. |
| Business data | Organization data | Basic enterprise information | Enterprise business scope and contact details, such as the enterprise’s business nature, business scope data, address, telephone number, email address, legal representative, general manager and board secretary information, share capital information and shareholding increase and decrease data, and shareholder information and changes. | 1. Undisclosed data is sensitive general data; 2. disclosed data is ordinary general data. |
| Business data | Organization data | Credit data | Guarantee information, credit rating information, credit risk data and the like, such as guarantors and guaranteed amounts, enterprise or individual credit records, and default rates. | 1. Undisclosed data is sensitive general data; 2. disclosed data is ordinary general data. |
| Business data | Organization data | Regulatory data | Basic regulatory information and information on disposal measures and penalties, such as information on regulatory authorities, regulated entities and regulatory measures, and information on disposal measures and penalties imposed on enterprises, such as public notifications, criticisms and warnings. | 1. Undisclosed data is sensitive general data; 2. disclosed data is ordinary general data. |
| Business data | Industry indicator data | Agriculture, forestry, animal husbandry and fishery | Indicators, reports, industry-chain data, supply and demand data and the like for the agriculture, forestry, animal husbandry and fishery sector in countries and regions. | 1. Domestic agriculture, forestry, animal husbandry and fishery sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas agriculture, forestry, animal husbandry and fishery sector data is ordinary general data. |
| Business data | Industry indicator data | Industry | Statistical data on the overall production scale, economic performance and market sales of major industrial enterprises in countries and regions, such as industrial value added, operating revenue, and output and consumption of industrial products. | 1. Domestic industrial data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas industrial data is ordinary general data. |
| Business data | Industry indicator data | Energy | Indicators, reports, industry-chain data, supply and demand data and the like for the energy sector in countries and regions. | 1. Domestic energy sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas energy sector data is ordinary general data. |
| Business data | Industry indicator data | Food and beverage | Indicators, reports, industry-chain data, supply and demand data and the like for the food and beverage sector in countries and regions. | 1. Domestic food and beverage sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas food and beverage sector data is ordinary general data. |
| Business data | Industry indicator data | Textiles and apparel | Indicators, reports, industry-chain data, supply and demand data and the like for the textiles and apparel sector in countries and regions. | 1. Domestic textiles and apparel sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas textiles and apparel sector data is ordinary general data. |
| Business data | Industry indicator data | Petrochemicals | Indicators, reports, industry-chain data, supply and demand data and the like for the petroleum and chemical sector in countries and regions. | 1. Domestic petroleum and chemical sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas petroleum and chemical sector data is ordinary general data. |
| Business data | Industry indicator data | Automotive | Indicators, reports, industry-chain data, supply and demand data and the like for the automotive sector in countries and regions. | 1. Domestic automotive sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas automotive sector data is ordinary general data. |
| Business data | Industry indicator data | Transport | Indicators, reports, industry-chain data, supply and demand data and the like for the transport sector in countries and regions. | 1. Domestic transport sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas transport sector data is ordinary general data. |
| Business data | Industry indicator data | Real estate and construction | Indicators, reports, industry-chain data, supply and demand data and the like for the real estate and construction sector in countries and regions. | 1. Domestic real estate and construction sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas real estate and construction sector data is ordinary general data. |
| Business data | Industry indicator data | Steel | Indicators, reports, industry-chain data, supply and demand data and the like for the steel sector in countries and regions. | 1. Domestic steel sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas steel sector data is ordinary general data. |
| Business data | Industry indicator data | Non-ferrous metals | Indicators, reports, industry-chain data, supply and demand data and the like for the non-ferrous metals sector in countries and regions. | 1. Domestic non-ferrous metals sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas non-ferrous metals sector data is ordinary general data. |
| Business data | Industry indicator data | Building materials and furniture | Indicators, reports, industry-chain data, supply and demand data and the like for the building materials and furniture sector in countries and regions. | 1. Domestic building materials and furniture sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas building materials and furniture sector data is ordinary general data. |
| Business data | Industry indicator data | Machinery and equipment | Indicators, reports, industry-chain data, supply and demand data and the like for the machinery and equipment sector in countries and regions. | 1. Domestic machinery and equipment sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas machinery and equipment sector data is ordinary general data. |
| Business data | Industry indicator data | Electronics and electrical appliances | Indicators, reports, industry-chain data, supply and demand data and the like for the electronics and electrical appliances sector in countries and regions. | 1. Domestic electronics and electrical appliances sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas electronics and electrical appliances sector data is ordinary general data. |
| Business data | Industry indicator data | Information services | Indicators, reports, industry-chain data, supply and demand data and the like for the information services sector in countries and regions. | 1. Domestic information services sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas information services sector data is ordinary general data. |
| Business data | Industry indicator data | Light manufacturing | Indicators, reports, industry-chain data, supply and demand data and the like for the light manufacturing sector in countries and regions. | 1. Domestic light manufacturing sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas light manufacturing sector data is ordinary general data. |
| Business data | Industry indicator data | Pharmaceuticals and biotechnology | Indicators, reports, industry-chain data, supply and demand data and the like for the pharmaceuticals and biotechnology sector in countries and regions. | 1. Domestic pharmaceuticals and biotechnology sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas pharmaceuticals and biotechnology sector data is ordinary general data. |
| Business data | Industry indicator data | Public utilities | Indicators, reports, industry-chain data, supply and demand data and the like for the public utilities sector in countries and regions. | 1. Domestic public utilities data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas public utilities data is ordinary general data. |
| Business data | Industry indicator data | Finance and insurance | Indicators, reports, industry-chain data, supply and demand data and the like for the finance and insurance sector in countries and regions. | 1. Domestic finance and insurance sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas finance and insurance sector data is ordinary general data. |
| Business data | Industry indicator data | Wholesale and retail | Indicators, reports, industry-chain data, supply and demand data and the like for the wholesale and retail sector in countries and regions. | 1. Domestic wholesale and retail sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas wholesale and retail sector data is ordinary general data. |
| Business data | Industry indicator data | Tourism and hotels | Indicators, reports, industry-chain data, supply and demand data and the like for the tourism and hotel sector in countries and regions. | 1. Domestic tourism and hotel sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas tourism and hotel sector data is ordinary general data. |
| Business data | Industry indicator data | Culture, education, sports, entertainment and handicrafts | Indicators, reports, industry-chain data, supply and demand data and the like for the culture, education, sports, entertainment and handicrafts sector in countries and regions. | 1. Domestic culture, education, sports, entertainment and handicrafts sector data is sensitive general data; where its coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and it can reflect conditions at the level of a provincial-level administrative region or above, it is important data; 2. overseas culture, education, sports, entertainment and handicrafts sector data is ordinary general data. |
| Business data | News and report data | Industry news | Financial and economic news and information data, such as macroeconomic reporting and reporting on financial market indices, together with commentary, opinion and the like on financial and economic policies, activities and markets. | Ordinary general data. |
| Business data | News and report data | Research reports | Research report data, such as industry research reports and investment analysis research reports. | 1. Data whose coverage, time span, precision or the like exceeds that publicly released by the relevant departments (including data previously made public) and which can reflect conditions at the level of a provincial-level administrative region or above is important data; 2. research reports publicly released by licensed financial institutions are ordinary general data; other research reports are sensitive general data. |
| Business data | News and report data | Policies, laws and regulations | Data on laws, administrative regulations, departmental rules, normative documents, industry standards and the like relating to the financial information services industry. | Ordinary general data. |
| Business data | News and report data | Expert opinions | Analysis, commentary, opinions and the like on financial and economic matters published by experts in the industry and by publicly influential figures. | Ordinary general data. |
| User data | Individual user data | Basic information of individual users | Basic information of individual users, such as the individual’s name, sex, date of birth, mobile phone number, identity document number, email address, mailing address, location information, user profile, account password and behavioral data. | 1. A dataset of basic information on 10 million or more individual users is important data; 2. other data is sensitive general data. |
| User data | Individual user data | Transaction data of individual users | Individual users’ financial accounts, financial assets, trading positions, trading orders and similar data. | 1. A transaction dataset covering 1 million or more individuals is important data; 2. other data is sensitive general data. |
| User data | Individual user data | Biometric identification information of individual users | Individual users’ biometric identification information, such as facial and fingerprint information. | 1. A biometric identification information dataset covering 100,000 or more individuals is important data; 2. other data is sensitive general data. |
| User data | Institutional user data | Basic information of institutional users | Basic information of institutional users, such as the institution’s name, address, contact person, business license, unified social credit code, institution description, institutional user preferences, and institutional account password information. | 1. A dataset of basic information on 1 million or more institutional users is important data; 2. other data is sensitive general data. |
| User data | Institutional user data | Transaction data of institutional users | Institutional users’ financial assets, trading positions, trading orders and similar data. | 1. A transaction dataset covering 100,000 or more institutional users is important data; 2. where the leakage or tampering of the transaction data may directly affect national security, such data is important data; other data is sensitive general data. |
| Enterprise data | Operations and management data | Financial data | Financial data of the financial information services enterprise, such as operating revenue, total profit, assets and liabilities. | Sensitive general data. |
| Enterprise data | Operations and management data | Settlement management data | The financial information services enterprise’s purchasing details, sales details, bank account information and fund transaction records. | Sensitive general data. |
| Enterprise data | Operations and management data | Human resources data | Documents and other data relating to the financial information services enterprise’s human resources management activities. | Sensitive general data. |
| Enterprise data | Operations and management data | Marketing data | Data relating to the financial information services enterprise’s marketing activities, such as marketing and promotional information, market analysis, target markets, marketing plans, customer relationship information, customer service information and channel information. | Sensitive general data. |
| Enterprise data | Operations and management data | Risk control and supervision data | The full-process data and conclusive data generated when the financial information services enterprise carries out internal control, compliance management, internal audit, risk self-inspection and other self-supervision and self-restraint activities, such as internal control assessment reports, compliance inspection records, audit working papers, lists of problems found in risk screening, and rectification tracking records. | Sensitive general data. |
| Enterprise data | Operations and management data | Other operations and management data | Other data collected and generated by the financial information services enterprise in the course of its operations and internal management, such as business strategy and merger, acquisition and financing information. | Sensitive general data. |
| Enterprise data | System operation and maintenance data | Configuration data of network equipment and information systems | Basic information and configuration data of network equipment and information systems. | Sensitive general data. |
| Enterprise data | System operation and maintenance data | Log data | Record information generated in the course of network and system operation, used to describe the operations, events and state changes of systems, equipment, software and the like. | Sensitive general data. |
| Enterprise data | System operation and maintenance data | Security monitoring data | Information and data on security threats, vulnerabilities, risks and the like obtained by monitoring networks and systems. | Sensitive general data. |
| Enterprise data | System operation and maintenance data | Security incident data | Descriptive information relating to security incidents, including the time, place, type, scope of impact and losses caused by the incident. | Sensitive general data. |
Appendix B — Template for submitting the catalogue of important data
The template groups its columns under three headings: Basic information on the data (columns 2–13), Responsible entity (columns 14–17) and Data security status (columns 18–22).
| No. | Data name | Basis for classification and grading | Level 1 category | Level 2 category | Level 3 category | Data grade | Data carrier | Data source | Data volume (records) | Total storage (GB) | Data coverage type | Data coverage proportion | Name of data processor | Institution code | Location of data processor | Person responsible for data security and contact details | Information system name | Multi-Level Protection Scheme (MLPS) status | Whether critical information infrastructure | Whether a data security risk assessment has been conducted | Basic situation and conclusion of the risk assessment |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | |||||||||||||||||||||
| 2 | |||||||||||||||||||||
| 3 |
Notes:
- Data name: the field name of the important data.
- Basis for data classification and grading: the policy document or standard or specification relied on.
- Level 1 category, Level 2 category, Level 3 category: see Appendix A.
- Data grade: important data or core data.
- Data carrier: the form in which the data exists.
- Data source: how the data was collected or generated.
- Data volume: counted by number of data records.
- Total storage: counted by the size of the data in storage space.
- Data coverage type and coverage proportion: the proportion of the field, group, region or the like to which the data belongs.
- Location of data processor: enter the city (district) of the enterprise’s business registration.
- Basic situation and conclusion of the risk assessment: the data security risk assessment institution, assessment date, assessment conclusion and the like.