数智化转型网szhzxw.cn 数据治理 数据确权:公共数据多重权责关系的辨析

数据确权:公共数据多重权责关系的辨析

随着数字化浪潮席卷全球,数字技术正深刻地改变着数据的获取、传播、管控及利用方式。我国围绕加快建设网络强国、数字中国、数字政府建设作出一系列重大决策部署,有力推动我国数字化发展水平持续提升。各行业、各地方的各类信息系统积累了海量公共数据,既是国家治理的重要依据,也是推动数字经济发展的战略资源。 数字化转型网(www.szhzxw.cn)

然而,对于公共数据的概念而言,在学术界尚未给出准确定义,国家层面和地方层面就公共数据概念、范畴及其权责问题等也未达成一致的认识,这极大地制约了公共数据开发利用的深化进程。

本文将从公共数据的源头入手,以明晰各类主体权责为主线,维护各类主体权益为前提,释放公共数据价值为核心,强化公共数据分类分级治理为手段,防范安全风险为底线,分类施策、依法保护各类主体权益,促进公共数据合理合规的流通和安全可信的开发利用。

一、公共数据的内涵特征以及权责关系

(1)公共数据内涵

数据是指任何以电子或者其他方式对信息的记录。公共数据是指由国家机关和法律、行政法规授权的具有管理公共事务职能或者提供公共服务的组织,在履行公共管理职责和提供公共服务过程中收集和产生的,涉及公共利益的各类数据。公共数据不仅涉及政府机关,还涉及供水、供电、供气、公共交通、公共健康、公共教育等提供公共服务的企事业单位或社会组织,也涉及政府资金和公益基金所支撑的公益类研究机构或社会组织等,这些机构统称为公共管理服务机构。

(2)公共数据特征

公共数据具有多源性、权威性、排他性、价值性、敏感性等五个特征。

多源性:一方面,公共管理服务是由不同类型的公共管理服务机构所提供,持有公共数据的数源部门(或数据供给部门)涉及政府机关、企事业单位、社会组织和各类团体等多源主体;另一方面,被采集数据的主体(称为数据关联主体)涉及法人、自然人、各类事物及其行为等多类主体对象。因此,公共数据是多源性,从而导致其以分散、动态、多样、海量的方式存在,其权属关系也是多重复杂的。

权威性:公共管理服务机构(即公共数据持有主体)是依据相关法律法规所赋予的公共管理服务职能合法合规地获得数据关联主体的特定数据,具有法定赋予的公信力和权威性。公共数据在采集、存储、使用、加工、传输、提供和开放过程须严格遵循相关业务标准规范,以确保数据的准确性、严谨性和权威性。

排他性:公共数据是由公共管理服务机构按照职能依法依规收集并经数据关联主体核对确认,是真实、准确、有效的,具有排他性、唯一性,例如人口数据、社保数据等,因而也具有不可替代性。

价值性:公共数据涉及政治、经济、社会、文化、生活的各领域各层面,具有体量大、质量好、门类全等特点,应用场景覆盖面较广,与政治、经济、社会和文化生活息息相关,融合复用强、倍增价值高,具有巨大的开发利用价值。 数字化转型网(www.szhzxw.cn)

敏感性:公共数据反映国家经济社会运行整体情况,数据经汇聚融合后,可用于公共决策分析,涉及国家安全和个人权益,具有较高的敏感性,需统一授权、统一管控、统一监督,确保公共数据开发利用全流程可监管、可记录、可追溯、可审计。

(3)公共数据权责关系模型

联合国发布的《2021年数字经济报告》指出,在数据驱动的数字经济的新背景下,所有权和主权等概念正受到挑战,重要的不是确定谁“拥有”数据,而是谁有权访问、控制和使用数据。数据和数据流动的治理工作至关重要。在数字空间中,数据是一串由0和1组成的比特流(即万物皆比特),可以在各类主体(即利益攸关方)间通过智能终端、网络及平台等进行传递、复制。数据被分散(布)映射到数字空间中,由各类主体共同持有(即多方共有),各类主体都能持有原始数据全部副本或部分副本以便开发利用。数据权属关系演变为复杂的多重相互依赖,同时各类主体的角色身份在数据流动过程中存在交叉重叠与相互转换,进而给数据权属确定、各类主体权责界定及权利保护等带来了全新的挑战。在由数据构造的数字空间中,数据所特有的权利实质就是对由比特流组成数据的实际掌控力或控制处理能力(即数据控制权)。表1对数据特有权利与传统权利进行了归纳分析。 数字化转型网(www.szhzxw.cn)

从公共数据开发利用全生命周期看,公共数据涉及数据关联主体(即数据产生者)、公共管理服务机构(即数据收集者、数据供给者、数源机构)、数据中心(即数据汇聚者)、数据主管机构(即数据统管者)、数据授权运营机构(即数据专业加工者)、数据专业服务机构、数据交易机构(即数据中介)、数据使用者等多个利益攸关方。公共数据被各利益攸关方按照相关责任在不同环节分别持有,且所有持有数量规模及权责范围也各不相同。公共数据权责关系模型(参见图1)将公共数据开发利用生命周期分为三个环节(即合规可靠的数据供给环节、合规信赖的数据流通环节和合规倍增的数据利用环节),并对各个环节的权责范围进行分析。图2对各环节公共数据主体多重权责进行了归纳。

二、公共数据合规可靠的供给环节权责分析

从数据供给侧的角度看,公共数据源自数据关联主体,却由公共管理服务机构、数据中心和数据主管机构三类主体实际掌控着,涉及多层级(国家、省市、区县等)、多行业领域(行政管理、民生服务、社会保障等)、多种技能(如行政管理、数据管理等),需要重点理顺各方权责关系,逐步构建“分而自治、协同共治”的数据治理格局,形成合规可靠的高质量公共数据服务保障体系。

(1)数据关联主体

数据关联主体是数据产生者(也可称为“数据关联对象”,简称“数据主体”或“数据对象”),涉及自然人、法人、非法人组织及其各类相关行为。

根据公共管理服务的相关法律法规要求,数据关联主体应该配合公共管理服务机构,在履职尽责过程中提供所需的最小必要数据,并按照相关流程加以核对验证,确保数据真实、准确、有效。按照数据关联主体的类型不同,这些数据将会涉及不同类型的传统权利。以自然人为例,这些数据将可能涉及数据关联主体的人格权、物权及知情权等隐私信息。这些数据属于某个数据主体的特定属性及行为轨迹,个体特征凸显,但涉及范围小,在没有被某类机构利用数据虹吸效应集聚的前提下,暂不具备规模化开发价值。数据关联主体本应是这些数据的实际主人,但受限于能力和手段,却无法真正持有或管辖这些数据,如用电数据、用水数据往往被供电、供水的企业所掌握。事实是数据关联主体已将数据持有权或管辖权让渡给了公共管理服务机构。《数据安全法》明确规定,国家保护个人、组织与数据有关的权益。特别是,依法保护自然人对其个人信息享有的人格权益。 数字化转型网(www.szhzxw.cn)

(2)公共管理服务机构

公共管理服务机构是数据收集者(或称为“数源部门”),应当遵循必要、正当、合法的原则,按照法定权限、范围、流程及标准规范收集所需数据,特别是利用数字技术将所收集数据有效管理起来,并从源头辨别数据关联主体,承担数据分类分级、数据血缘识别、元数据登记、数据质量维护、数据安全防护等相关数据责任。公共管理服务机构依据法律法规所赋予的职责,获得了与履职尽责关联的批量数据采集权、持有权及管辖权,从而事实拥有了对该类数据资源持有权和数据加工使用权。这类数据具有一定的行业领域特征,逐步形成排他性的批量数据(如人口数据、法人数据、电力数据等),具备满足特定行业领域的规模化开发利用价值。公共管理服务机构还应当遵守网络安全、数据安全、个人信息保护等法律、法规以及国家标准的强制性要求,对在履行职责中知悉的个人隐私、商业秘密等应当依法予以妥善保护,不得泄露或者非法向他人提供,即承担数据安全责任。

公共管理服务机构负责所属业务领域数据管理工作的统筹、指导、协调和监督;强化公共数据分类分级管理,建立健全本系统、本行业公共数据质量管理体系,加强数据质量管控,保障数据真实、准确、完整、及时、可用;按照数据与业务对应的原则,梳理公共数据资源,维护本系统、本行业的主数据、元数据及数据模型;根据公共数据资源目录编制规范要求,对机构的公共数据进行目录管理;按照公共数据资源体系整体规划相关制度规范要求,规划本机构的公共数据资源体系,建设并管理相关主题数据库;在各地区数据主管机构的指导下,按照应用需求配合所属区域的数据中心,将相应的公共数据统一归集、更新到公共数据管理平台的基础数据库和专题数据库;探索首席数据官或数据管理专员等专岗、专职制度创新。

(3)数据中心

数据中心是数据汇聚者,按照各地、各行业相关法规赋予的职责,获得本地区或本行业海量公共数据资源的归集权、持有权及管辖权,事实上拥有了对该地区或该行业这批规模数据资源持有权和数据加工使用权,同时要构建公共数据基础设施及公共数据资源管理平台,为本地区、本行业的海量公共数据资源实现统一、集约、安全、高效的管理,提供技术保障和服务支撑。各地数据中心应承担上传下达的数据流通枢纽作用,按照物理分散、逻辑集中的方式,归集所辖区域内各公共管理服务机构的相关数据,并将高频使用的数据引流到本地区数据湖(或数据资源池)中,为本地区公共数据开发利用提供稳定运行的数据底座。行业数据中心应负责归集本行业领域各层级的数据,为本行业领域的数据开发利用提供稳定运行的数据底座,同时还要指导各地所属机构,配合当地数据中心归集本行业的所属区域相关数据,服务于地方数字政府、数字经济及数字社会建设发展。

各地数据中心具体承担本区域公共数据的集中统一管理,根据公共数据的通用性、基础性、重要性和数据来源属性等组织制定公共数据分类规则和标准,明确不同类别公共数据的管理要求,在公共数据全生命周期采取差异化管理措施;指导各机构编制公共数据目录,并提供技术支撑和服务保障;在数据主管机构的指导下,组织开展公共数据的质量监督,对数据质量进行实时监测和定期评估,并建立异议与更正管理制度。 数字化转型网(www.szhzxw.cn)

各地数据中心如同每个区域的水库,汇聚并流淌着区域经济社会发展的全量公共数据(即块数据);行业数据中心如同运河贯穿全国各地,汇聚并流淌着行业领域的全量数据(即条数据);全国一体化数据中心体系建设将各地数据中心和各行业数据中心有效贯通,进而形成服务全国数字经济发展的新型数据基础设施。

(4)数据主管机构

数据主管机构是数据统管者,按照各地、各行业相关法规赋予的职责,获得本地区、本行业海量公共数据资源的综合统筹管理权(即统管权),是代表本地区、本行业行使海量公共数据资源持有权、数据加工使用和数据产品经营权等综合管理的机构,负责统筹规划、综合协调本地区、本行业的公共数据发展和管理工作,促进公共数据综合治理和流通利用。特别是,各地数据主管机构是区域公共数据统筹管理工作的指挥中枢,如同看护区域水库的管理员,负责建立健全公共数据资源管理体系,组织开展公共数据资源调查,绘制完整的地区公共数据资源地图,强化对所辖地区数据中心的指导和监督,推进、指导、协调、监督本地区各公共管理与服务机构的公共数据共享、开放和利用,充分发挥公共数据资源对优化公共管理和服务、提升城市治理现代化水平、促进经济社会发展的积极作用。

数据主管机构是各地、各行业公共数据治理体系的总策划、总指挥,是全面主导地区、行业公共数据有效供给的责任主体,需要不断提高系统思维意识、统筹协调能力、数据治理技巧,做到抓大局、抓共性、抓平台、抓成效。组织建立健全数据全流程质量管控体系,加强数据质量事前、事中和事后的监督检查,及时更新已变更、失效数据,实现问题数据可追溯、可定责,保证数据的及时性、准确性、完整性。

三、公共数据合规信赖的流通环节权责分析

公共数据流通的形式可以是公共数据体制内循环共享,也可以是从供给侧流向数据消费者,是从供给到实现利用的必经阶段。公共数据流通环节的相关权责主体包含数据关联主体、公共管理服务机构、数据中心、数据主管机构以及数据授权运营机构等各类主体。高效、安全、合规的公共数据流通需要相关数据主体各自承担起监督、运维、管控等相应责任。 数字化转型网(www.szhzxw.cn)

(1)数据关联主体

公共数据在流通过程中,在涉及自然人、法人和非自然人组织的数据关联主体时,应当注意保护数据关联主体知情权、决定权等合法权益。数据关联主体提高维护合法权益的意识,依据《个人信息保护法》等法律法规,明确知晓个人信息或者法人信息流向、用途,避免人身、人格、财产安全受到侵害。

(2)公共管理服务机构

公共数据按照共享属性分为无条件共享、受限共享和不共享数据。公共管理服务机构应根据法定职责,对其收集、产生的公共数据进行评估,科学合理地确定共享属性,形成数据共享清单,并定期更新;列入受限共享数据的,应当说明理由并明确共享条件;列入不共享数据的,应当提供明确的法律、法规、规章或者国家有关规定依据。

公共管理服务机构应根据履职尽责需要,提出公共数据共享申请,明确数据使用的依据、目的、范围、方式及相关需求,并按照本级数据主管机构和数源部门的要求,加强共享数据使用管理,不得超出使用范围或者用于其他目的。 数字化转型网(www.szhzxw.cn)

公共管理服务机构在收到其他公共管理服务机构或社会团体提出的数据使用需求申请后,应在规定时间内做出回应,并提供必要的数据使用指导和技术支持。

(3)数据中心

数据中心应在数据主管机构的指导下,持续完善公共数据资源管理平台的共享交换服务功能,确保各机构之间公共数据能够及时、准确地共享;负责维护本地区、本行业公共数据共享目录;在数据主管机构的指导下,组织实施本地区自然人、法人、自然资源和空间地理等基础数据库建设;根据公共数据分类管理要求对相关数据实施统一归集,保障数据向大数据资源平台归集的实时性、完整性和准确性;协助数据主管机构和公共管理与服务机构解决跨部门、跨省份的数据流通、共享技术问题;配合数据授权运营机构搭建安全可信的数据开发利用环境,指导数据授权运营机构开发针对公共数据流通、共享的相关数据产品和数据服务;监测公共数据应用情况,当发现超范围情况,及时通知数据主管机构及相关机构,并立即停止相关服务。 数字化转型网(www.szhzxw.cn)

(4)数据主管机构

数据主管机构应当建立以共享需求清单、责任清单和负面清单为基础的公共数据流通机制;会同有关机构在公共管理数据平台上,不断健全完善人口、法人、信用、电子证照、自然资源空间地理等基础数据库,以及跨地域、跨部门专题数据库;负责统筹采购那些公共数据管理平台无法提供但履职尽责中确有必要的其他社会数据;会同有关机构,指导所属区域数据中心建设和完善公共数据管理平台,统筹推进本地区公共数据目录一体化建设,组织制定统一的目录编制标准,组织编制本区域的公共数据目录;建立健全公共数据流通供需对接协调处理机制,当发生异议时负责协调处理;指导所属大数据中心动态更新公共数据流通目录、需求清单及负面清单;依托公共数据管理平台建立统一的数据共享、开放通道;建立日常公共数据管理工作监督检查机制,组织对公共管理和服务机构的公共数据目录编制工作、质量管理、共享、开放、流通等情况开展监督检查;对公共数据工作的成效情况定期组织考核评价。

(4)数据授权运营机构

数据授权运营机构是具有专业技能的数据开发利用者,按照相关要求及流程,从数据主管机构获得特定范围及限定数量的公共数据开发权,在安全可信的数据开发环境中持有相关数据,从事数据清洗、标注、分析、挖掘、脱敏、算法训练、机器学习等数据处理活动,形成数据产品和数据服务(如高价值开放数据集、算法模型、API服务等)。 数字化转型网(www.szhzxw.cn)

数据授权运营机构应在数据主管机构指导下,在数据中心配合下,搭建安全可信的数据开发利用环境,保证公共数据安全、可靠、高效流通。在保障国家安全、社会公共利益,保护公民、法人和其他组织合法权益的前提下,开展本区公共数据授权运营活动,并在任何情况下,不得以任何形式将原始数据提供给第三方,也不得用于其他任何目的,确保数据不出域、数据可用不可见。

四、公共数据合规倍增的利用环节权责分析

公共数据蕴含着巨大的经济价值,是推动数字经济发展的基础性战略资源,应当推进公共数据向全社会更广泛地开放,促进市场化配置下公共数据与社会数据之间的外部大循环。鼓励、支持公民、法人和其他组织利用开放的公共数据开展科学研究、咨询服务、应用开发、创新创业等活动,促进公共数据与非公共数据融合发展。公共数据开放应当遵循分类分级、需求导向、安全可控的原则,在法律、法规允许的范围内最大限度地开发利用。公共数据利用环节的相关权责主体包含公共管理服务机构、数据中心、数据主管机构、数据授权运营机构、数据交易机构、数据使用者等。 数字化转型网(www.szhzxw.cn)

(1)公共管理服务机构

公共管理服务机构应按照职责范围,明确本机构公共数据的开放范围、开放类型、开放条件和更新频率等,并动态调整;负责通过公共数据开放平台发布本机构的公共数据开放目录;有条件开放的公共数据,应当在编制公共数据开放目录时明确开放方式、使用要求及安全保障措施等。

(2)数据中心

数据中心依托公共数据资源管理平台建设和维护公共数据开放平台,根据公共数据开放类型,提供数据下载、应用程序接口,并搭建安全可信的数据综合开发利用环境等;在数据主管机构的指导、监督下,根据数据授权运营机构管理办法,组织对提交数据授权运营机构申请的机构进行资质审查和能力评估;与数据授权运营机构签订授权运营协议,授权运营协议应当明确授权运营范围、运营期限、合理收益的测算方法、数据安全要求、期限届满后资产处置等内容;负责对数据授权运营机构实施日常监督管理。

(3)数据主管机构

数据主管机构应当建立以公共数据资源目录体系为基础的公共数据开放管理制度,组织各相关机构编制公共数据开放目录并及时调整;应当依托公共数据资源管理平台建设公共数据开放平台,并组织公共管理和服务机构通过该平台向社会开放公共数据;组织制定公共数据授权运营管理办法,明确授权方式、授权数据运营机构的安全条件和运营行为规范等内容;会同网信等相关部门和专家,对授权数据运营机构规划的应用场景进行合规性和安全风险等评估;组织开展公共数据开放和开发利用的创新试点;组织各公共管理和服务机构制定年度公共数据开放重点清单,以便社会广泛利用。

(4)数据授权运营机构

数据授权运营机构应按照公共数据授权运营管理办法的相关要求及程序,提交授权公共数据运营机构的申请及相关配套资料;在数据主管机构指导下,与数据主管机构或数据中心或公共管理与服务机构商定委托数据开发利用任务,确定数据开发用途、数据应用场景等,并签订委托授权协议;接受数据主管机构和数据中心组织资质审查与能力评估;依托公共数据平台对构建安全可信的数据开发利用环境,按照原始数据不出域的原则,对授权运营的公共数据进行加工;对加工形成的数据产品和服务,可以向用户提供并获取合理收益。 数字化转型网(www.szhzxw.cn)

(5)数据交易机构

数据交易机构作为数据开放平台统一服务门户,负责建设数据交易规则、数据交易平台,制定交易流程、监督数据交易行为,并负责将数据产品或数据服务向社会推广,促进数据开发利用主体生态体系建设。

(6)数据使用者

数据使用者有权对公共数据资源开发利用形成的数据产品和服务进行合法获取并按照相关约定合规使用。鼓励自然人、法人和非法人组织对公共数据进行深度加工和增值使用,激活数据乘数效应,通过积极打造多个公共数据应用场景释放公共数据价值,优化资源配置、提高生产效率,为新质生产力注入新动力,最大限度地发挥公共数据的经济社会价值。 数字化转型网(www.szhzxw.cn)

五、打造公共数据价值倍增的服务体系

联合国在《2021年数字经济报告》中提出,将数据视为一种全球的公共品。公共数据作为公共管理和公共服务过程中的产物,涉及全社会的公共利益和公共福祉,如同水资源一样滋润着数字政府、数字经济及数字社会的协同发展,属于全社会共有的公共资源,需要取之于民、用之于民。

综上,公共数据权责关系模型将公共数据开发利用生命周期分为数据供给环节、数据流通环节和数据利用环节。公共数据的多重权责关系是一个从量变到质变的发展过程,如同水滴变成溪流,溪流汇成江河,江河聚于水库,水库转化为水厂或水电站;还是一个能量转化的过程,从势能到动能,从动能到势能,根据能量需要实现势能和动能之间的相互转化,如同随着水的流动汇集力量形成势能,势能集聚爆发更大的动能,循环往复、不断迭代产出更大的能量。

公共数据汇溪流为江河大海,集聚势能而迸发更强动能,进而创造更大更强的数据价值来造福社会、造福人类。 数字化转型网(www.szhzxw.cn)

在此基础上,公共数据开发利用应当紧紧围绕构建纵深分域数据要素市场运营体系的总体思路(见图3),打造“一座”(数据底座)、“两场”(资源供给市场和产品流通市场)、“三域”(即内部管控域、中间加工域、外部流通域)、“四链”(即供给链、加工链、价值链和监管链)。

夯实安全健壮的数据底座,推动公共数据资源供给一级市场和公共数据产品服务流通二级市场的构建和发展;打造“内部管控域+中间加工域+外部流通域”三域纵深分域的数据流通多方协同治理体系;打造以合规可靠的供给链、合规信赖的加工链、合规倍增的价值链和合规溯源的监管链等四链有机组成的数据合规可信保障机制,统筹健全数据持有权、管理权、运营权、加工使用权及产品经营权等多维权限的权责设定、授权及监督体系,明晰数据提供方、汇聚方、运营方、开发方、使用方、监管方等各方权责,保障数据高效合规的流通利用,让公共数据“供得出”“流得动”“用得好”“管得住”,发挥公共数据的社会效益,释放公共数据的经济价值,让数字中国乘势而上。

此图片的alt属性为空;文件名为%E5%AE%98%E7%BD%91%E8%AF%BB%E8%80%85%E7%BE%A42.png

翻译:

Data rights confirmation: Discrimination of multiple rights and responsibilities in public data

As the digital wave sweeps across the world, digital technologies are profoundly changing the way data is acquired, disseminated, managed and used. China has made a series of major decisions and plans to accelerate the construction of a strong cyber country, a digital China, and a digital government, which has effectively promoted the continuous improvement of China’s digital development level. Various information systems in various industries and localities have accumulated huge amounts of public data, which is not only an important basis for national governance, but also a strategic resource for promoting the development of the digital economy.

However, the concept of public data has not been accurately defined in the academic community, and there is no consensus on the concept, scope and rights and responsibilities of public data at the national and local levels, which greatly restricts the deepening process of the development and utilization of public data. 数字化转型网(www.szhzxw.cn)

This paper will start from the source of public data, with clarifying the rights and responsibilities of various subjects as the main line, safeguarding the rights and interests of various subjects as the premise, releasing the value of public data as the core, strengthening the classification and classification of public data as the means, preventing security risks as the bottom line, giving classified policies, protecting the rights and interests of various subjects according to law, and promoting the reasonable and compliant circulation of public data and the safe and reliable development and utilization.

1. The connotation and characteristics of public data and the relationship between power and responsibility

(1) Connotation of public data

Data is any record of information by electronic or other means. Public data refers to all kinds of data related to public interests collected and generated by organizations authorized by state organs and laws and administrative regulations to manage public affairs or provide public services in the process of performing public management duties and providing public services. Public data not only involves government agencies, but also enterprises, institutions or social organizations that provide public services such as water supply, power supply, gas supply, public transportation, public health, and public education, as well as public research institutions or social organizations supported by government funds and public welfare funds. These institutions are collectively referred to as public management service institutions.

(2) Public data characteristics

Public data has five characteristics: multi-source, authority, exclusivity, value and sensitivity.

Multi-source: On the one hand, public management services are provided by different types of public management service organizations, and the data source departments (or data supply departments) holding public data involve multi-source subjects such as government agencies, enterprises and institutions, social organizations and various groups; On the other hand, the subject of the collected data (called the data association subject) involves many types of subject objects such as legal persons, natural persons, various things and their behaviors. Therefore, public data is multi-source, which leads to its existence in a decentralized, dynamic, diverse and massive way, and its ownership relationship is multiple and complex. 数字化转型网(www.szhzxw.cn)

Authority: Public management service organizations (that is, public data holders) obtain the specific data of data association subjects in accordance with the public management service functions conferred by relevant laws and regulations, and have the credibility and authority conferred by law. The collection, storage, use, processing, transmission, provision and opening of public data must strictly follow relevant business standards and specifications to ensure the accuracy, rigor and authority of data.

Exclusivity: Public data is collected by public management service organizations in accordance with functions and laws and regulations and verified by data association subjects, which is true, accurate, effective, exclusive and unique, such as population data, social security data, etc., and therefore irreplaceable. 数字化转型网(www.szhzxw.cn)

Value: Public data involves all aspects of politics, economy, society, culture and life. It has the characteristics of large volume, good quality and comprehensive categories, wide application scenarios, and is closely related to political, economic, social and cultural life. It has strong integration and reuse, high multiplication value, and great development and utilization value.

Sensitivity: Public data reflect the overall situation of the country’s economic and social operation. After data integration, it can be used for public decision-making analysis, involving national security and personal rights and interests, with high sensitivity. Unified authorization, unified control and unified supervision are required to ensure that the whole process of public data development and utilization can be regulated, recorded, traceable and auditable.

(3) Public data right and responsibility relationship model

In the new context of a data-driven digital economy, concepts such as ownership and sovereignty are being challenged, and it is important not to determine who “owns” the data, but who has access to, control and use it. Governance of data and data flows is critical. In the digital space, data is a stream of bits composed of 0s and 1s (that is, everything is a bit), which can be transmitted and replicated among various subjects (that is, stakeholders) through intelligent terminals, networks and platforms. The data is distributed (cloth) and mapped into the digital space, which is jointly held by various types of entities (that is, multiple parties), and each type of entity can hold full or partial copies of the original data for development and utilization. The data ownership relationship has evolved into a complex multiple interdependence, while the roles and identities of various subjects overlap and transform each other in the process of data flow, which brings new challenges to the determination of data ownership, the definition of rights and responsibilities of various subjects and the protection of rights. In the digital space constructed by data, the essence of the right unique to data is the actual control or control processing ability of the data composed of bit streams (that is, data control). Table 1 summarizes and analyzes data-specific rights and traditional rights.

From the whole life cycle of public data development and utilization, Public data involves data association subjects (i.e., data producers), public management service organizations (i.e., data collectors, data providers, data source organizations), data centers (i.e., data aggregators), data authorities (i.e., data administrators), data authorization operation organizations (i.e., data professional processors), data professional service organizations, data trading organizations (i.e., data intermediaries), and data Multiple stakeholders such as data users. Public data is held separately by various stakeholders in accordance with relevant responsibilities, and all holdings vary in size and scope of authority and responsibility. The public data right and responsibility relationship model (see Figure 1) divides the public data development and utilization life cycle into three links (namely, the compliance reliable data supply link, the compliance reliable data circulation link and the compliance multiplied data utilization link), and analyzes the scope of the rights and responsibilities of each link. Figure 2 summarizes the multiple rights and responsibilities of public data subjects in each link. 数字化转型网(www.szhzxw.cn)

2. Public data compliance reliable supply link power and responsibility analysis

From the perspective of data supply side, public data comes from data association subjects, but is actually controlled by public management service organizations, data centers and data authorities, involving multiple levels (national, provincial and municipal, district and county, etc.), multi-industry fields (administrative management, people’s livelihood services, social security, etc.), and multiple skills (such as administrative management, data management, etc.). It is necessary to focus on rationalizing the relationship between the rights and responsibilities of all parties, gradually building a data governance pattern of “division and autonomy, collaboration and co-governance”, and forming a compliant and reliable high-quality public data service guarantee system.

(1) Data association subject

Data association subjects are data producers (also referred to as “data association objects”, referred to as “data subjects” or “data objects”), involving natural persons, legal persons, unincorporated organizations and various related behaviors. 数字化转型网(www.szhzxw.cn)

According to the requirements of relevant laws and regulations of public management services, the data association subject should cooperate with the public management service agency, provide the minimum necessary data required in the process of performing their duties, and verify it in accordance with the relevant process to ensure that the data is true, accurate and effective. Depending on the type of subject associated with the data, the data will involve different types of traditional rights. Taking natural human as an example, these data may involve privacy information such as personality rights, property rights and right to know of data associated subjects. These data belong to the specific attributes and behavioral trajectories of a certain data subject with prominent individual characteristics, but the scope involved is small. Under the premise that they are not aggregated by a certain type of institutions using the data siphon effect, they do not have the value of large-scale development for the time being. The data association subject should be the actual owner of these data, but limited by the ability and means, but can not really hold or control these data, such as electricity data, water data are often mastered by the power supply, water supply enterprises. The fact is that the data association subject has transferred the right to hold or jurisdiction over the data to the public management service. The Data Security Law clearly stipulates that the State protects the rights and interests of individuals and organizations in relation to data. In particular, the personal rights and interests of natural persons with respect to their personal information shall be protected in accordance with the law.

(2) Public administration service institutions

Public management service organizations are data collectors (or “data source departments”), should follow the necessary, legitimate and legal principles, in accordance with the legal authority, scope, process and standards to collect the required data, in particular the use of digital technology to effectively manage the collected data, and identify the data from the source of the relevant subjects. Responsible for data classification and classification, data kinship identification, metadata registration, data quality maintenance, data security protection and other related data responsibilities. According to the duties given by laws and regulations, public management service agencies have obtained the right, right and jurisdiction of batch data collection related to the performance of their duties, so that they actually have the right to hold such data resources and the right to use data processing. This kind of data has certain characteristics of the industry field, and gradually forms exclusive batch data (such as population data, legal person data, power data, etc.), which has the value of large-scale development and utilization to meet the specific industry field. Public management service agencies shall also comply with the mandatory requirements of laws, regulations and national standards such as network security, data security and personal information protection, and shall properly protect personal privacy and trade secrets that they know in the performance of their duties in accordance with the law, and shall not disclose or illegally provide them to others, that is, bear the responsibility for data security.

Public management service agencies are responsible for the overall planning, guidance, coordination and supervision of data management in their business fields; Strengthen the classification and classification management of public data, establish and improve the public data quality management system of the system and the industry, strengthen data quality control, and ensure that the data is true, accurate, complete, timely and usable; In accordance with the principle of data and business correspondence, sort out public data resources, maintain the master data, metadata and data model of the system and the industry; According to the requirements of public data resource catalog compilation standards, the organization’s public data catalog management; To plan the public data resource system of the institution, build and manage the relevant subject database in accordance with the relevant regulations and requirements of the overall planning of the public data resource system; Under the guidance of the regional data authorities, according to the application needs and cooperation with the data center of the region, the corresponding public data is collected and updated to the basic database and special database of the public data management platform; Explore professional and full-time system innovation such as chief data officer or data management specialist.

(3) Data center

The data center is a data aggregator, which obtains the collection rights, holding rights and jurisdiction of massive public data resources in the region or industry according to the responsibilities given by relevant laws and regulations of various regions and industries. In fact, it has the holding rights and data processing rights of these large-scale data resources in the region or industry. At the same time, it is necessary to build public data infrastructure and public data resource management platform. To achieve unified, intensive, safe and efficient management of massive public data resources in the region and the industry, and provide technical support and service support. Local data centers should play the role of data circulation hubs for uploading and distributing, collect the relevant data of various public management service institutions in their jurisdiction in the way of physical decentralization and logical centralization, and divert the high-frequency data to the local data lake (or data resource pool) to provide a stable data base for the development and utilization of public data in the region. The industry data center should be responsible for collecting data at all levels of the industry field, providing a stable data base for the development and utilization of data in the industry field, and guiding the local affiliated institutions to cooperate with the local data center to collect the relevant data of the industry’s region, serving the construction and development of local digital government, digital economy and digital society. 数字化转型网(www.szhzxw.cn)

Local data centers are specifically responsible for the centralized and unified management of public data in the region, formulate public data classification rules and standards according to the commonality, foundation, importance and data source attributes of public data, clarify the management requirements of different types of public data, and adopt differentiated management measures throughout the life cycle of public data. Guide institutions to compile public data catalogs and provide technical support and service guarantee; Under the guidance of the data authority, organize the quality supervision of public data, conduct real-time monitoring and regular evaluation of data quality, and establish a management system for objections and corrections. 数字化转型网(www.szhzxw.cn)

Local data centers are like reservoirs in each region, gathering and flowing full public data (block data) of regional economic and social development; The industry data center runs through all parts of the country like a canal, gathering and flowing the full amount of data in the industry field (that is, data); The construction of the national integrated data center system will effectively connect data centers in various regions and data centers in various industries, and then form a new data infrastructure that serves the development of the national digital economy.

(4) Data authority

The data authority is the data controller, which obtains the comprehensive and overall management right of the massive public data resources of the region and the industry (that is, the management right) in accordance with the responsibilities given by the relevant laws and regulations of the region and the industry, and is the organization that exercises the comprehensive management right of the massive public data resources, data processing and use, and data product management rights on behalf of the region and the industry. To be responsible for overall planning and comprehensive coordination of the development and management of public data in the region and the industry, and to promote the comprehensive management, circulation and utilization of public data. In particular, local data authorities are the command center of the overall management of regional public data, just like the administrator of the reservoir in the care area, responsible for establishing and improving the management system of public data resources, organizing the investigation of public data resources, drawing a complete map of regional public data resources, and strengthening the guidance and supervision of the regional data centers under their jurisdiction. To promote, guide, coordinate and supervise the sharing, opening and utilization of public data among public administration and service institutions in the region, and give full play to the positive role of public data resources in optimizing public administration and services, upgrading the modernization level of urban governance, and promoting economic and social development. 数字化转型网(www.szhzxw.cn)

The data authority is the overall planning and commanding of the public data governance system in various regions and industries, and the responsible subject of the effective supply of public data in the leading regions and industries. It needs to constantly improve the awareness of system thinking, overall planning and coordination ability, and data governance skills, so as to grasp the overall situation, grasp the commonality, grasp the platform, and grasp the results. Organize to establish and improve the quality control system of the whole process of data, strengthen the supervision and inspection of data quality before, during and after the event, timely update the changed and invalid data, realize the traceability and accountability of problem data, and ensure the timeliness, accuracy and integrity of data.

3. The public data compliance trust of the circulation link power and responsibility analysis

The form of public data circulation can be circular sharing within the public data system, or it can flow from the supply side to the data consumer, and it is a necessary stage from supply to utilization. The relevant authority and responsibility subjects of public data circulation include data association subjects, public management service institutions, data centers, data authorities and data authorization operation institutions. Efficient, secure and compliant public data circulation requires relevant data subjects to assume their respective responsibilities for supervision, operation and maintenance, and control.

(1) Data association subject

In the process of public data circulation, when involving natural persons, legal persons and non-natural person organizations, attention should be paid to protecting the legitimate rights and interests of data related subjects such as the right to know and the right to decide. Data related subjects should raise their awareness of safeguarding their legitimate rights and interests, clearly know the flow direction and use of personal information or corporate information in accordance with the Personal Information Protection Law and other laws and regulations, and avoid personal, personality and property safety violations.

(2) Public administration service institutions

According to the sharing attributes, public data can be divided into unconditional sharing, restricted sharing and unshared data. Public management service institutions shall evaluate the public data collected and generated by them according to their legal duties, determine the sharing attributes scientifically and reasonably, form a data sharing list, and update it regularly; Where restricted sharing of data is included, the reasons should be explained and the sharing conditions should be clearly defined; Where data is not shared, it shall provide a clear basis for laws, regulations, rules or relevant state provisions. 数字化转型网(www.szhzxw.cn)

Public management service institutions shall, according to the needs of performing their duties, put forward applications for public data sharing, clarify the basis, purpose, scope, mode and related needs of data use, and strengthen the management of the use of shared data in accordance with the requirements of the data competent authorities and data source departments at the same level, and shall not exceed the scope of use or be used for other purposes.

After receiving applications for data use requirements from other public administration service agencies or social groups, public administration service agencies shall respond within a specified time and provide necessary data use guidance and technical support.

(3) Data center

The data center shall, under the guidance of the data authority, continuously improve the sharing and exchange service function of the public data resource management platform to ensure that the public data can be shared timely and accurately among institutions; Responsible for maintaining local and industry public data sharing directories; Under the guidance of the data authority, organize the implementation of the basic database construction of natural persons, legal persons, natural resources and spatial geography in the region; Implement unified collection of relevant data according to the requirements of public data classification management to ensure the real-time, integrity and accuracy of data collection to the big data resource platform; Assist data authorities and public administration and service agencies in solving cross-departmental and cross-provincial data flow and sharing technology issues; Cooperate with data authorization operators to build a safe and trusted data development and utilization environment, and guide data authorization operators to develop relevant data products and data services for public data circulation and sharing; Monitor the application of public data, when found to be out of scope, promptly notify the data authority and relevant agencies, and immediately stop relevant services. 数字化转型网(www.szhzxw.cn)

(4) Data authority

Data authorities should establish public data circulation mechanisms based on shared demand lists, responsibility lists and negative lists; In conjunction with relevant institutions, we will continuously improve the basic databases of population, legal person, credit, electronic license, spatial geography of natural resources, as well as cross-regional and cross-departmental thematic databases on the public management data platform; Responsible for the overall procurement of other social data that is not available from public data management platforms but is necessary for the performance of their duties; To guide the construction of regional data centers and improve the public data management platform, coordinate and promote the integration of regional public data catalogs, organize the formulation of unified catalog compilation standards, and organize the compilation of regional public data catalogs; Establish and improve the coordination and handling mechanism of public data circulation supply and demand docking, and be responsible for coordinating and handling objections when they occur; Guide the affiliated big data center to dynamically update the public data circulation catalog, demand list and negative list; Relying on the public data management platform to establish a unified data sharing, open channels; Establish a supervision and inspection mechanism for daily public data management, and organize supervision and inspection of the compilation, quality management, sharing, opening and circulation of public data in public administration and service institutions; Organize regular assessment and evaluation of the effectiveness of public data work.

(4) Data authorization operator

Data authorization operation organization is a data development user with professional skills. According to relevant requirements and procedures, it obtains a specific scope and limited amount of public data development rights from the data authority, holds relevant data in a safe and trusted data development environment, and engages in data processing activities such as data cleaning, labeling, analysis, mining, desensitization, algorithm training, and machine learning. Form data products and data services (e.g., high-value open datasets, algorithmic models, API services, etc.).

The data authorization operation organization shall, under the guidance of the data authority and with the cooperation of the data center, build a secure and trusted data development and utilization environment to ensure the safe, reliable and efficient circulation of public data. Under the premise of safeguarding national security, social public interests, and protecting the legitimate rights and interests of citizens, legal persons and other organizations, the public data authorization operation activities in the region shall be carried out, and the original data shall not be provided to a third party in any form under any circumstances, nor used for any other purpose, to ensure that the data is not out of the domain and the data is available and invisible. 数字化转型网(www.szhzxw.cn)

4. Power and responsibility analysis of the utilization link of public data compliance multiplication

Public data contains huge economic value and is a basic strategic resource to promote the development of digital economy. It is necessary to promote the wider opening of public data to the whole society and promote the external circulation between public data and social data under market allocation. Encourage and support citizens, legal persons and other organizations to use open public data to carry out scientific research, consulting services, application development, innovation and entrepreneurship, and promote the integrated development of public data and non-public data. The opening of public data shall follow the principles of classification and classification, demand orientation, security and controllability, and maximize the development and utilization within the scope permitted by laws and regulations. The relevant powers and responsibilities of the public data utilization link include public management service agencies, data centers, data authorities, data authorization operation agencies, data trading agencies, data users, etc.

(1) Public administration service institutions

Public administration service institutions shall, in accordance with the scope of their responsibilities, clarify the scope, type, conditions and update frequency of their public data opening, and dynamically adjust them; To be responsible for publishing the public data open directory of the institution through the public data open platform; For public data subject to conditional opening, the manner of opening, use requirements and security measures shall be clearly defined when compiling the open catalogue of public data. 数字化转型网(www.szhzxw.cn)

(2) Data center

The data center relies on the public data resource management platform to build and maintain the public data open platform, provides data download and application program interface according to the type of public data open, and builds a safe and trusted data comprehensive development and utilization environment. Under the guidance and supervision of the data authority, and in accordance with the management measures of the data authorization operation agency, organize the qualification review and capability assessment of the agencies that submit the application for data authorization operation agency; The authorized operation agreement shall be signed with the data authorized operation organization. The authorized operation agreement shall specify the authorized operation scope, operation period, calculation method of reasonable income, data security requirements, asset disposal after the expiration of the term, etc. Responsible for the daily supervision and management of the data authorization operation organization. 数字化转型网(www.szhzxw.cn)

(3) Data authority

The data authority shall establish a public data open management system based on the public data resource catalog system, and organize relevant agencies to compile the public data open catalog and adjust it in time; We should build a public data open platform based on the public data resource management platform, and organize public management and service institutions to open public data to the society through the platform; Organize the formulation of public data authorization operation management measures, clarify the authorization method, the security conditions of authorized data operation institutions and the operation code of conduct; Jointly with relevant departments and experts such as Internet and information technology, to assess the compliance and security risks of the application scenarios planned by the authorized data operation organization; To organize and carry out innovative pilot projects on the opening up, development and utilization of public data; Organize public administration and service agencies to draw up an annual key list of public data opening for widespread use by society. 数字化转型网(www.szhzxw.cn)

(4) Data authorization operator

The data authorization operation organization shall submit the application for authorization of public data operation organization and related supporting materials in accordance with the relevant requirements and procedures of the public data authorization operation management measures; Under the guidance of the data authority, negotiate the entrusted data development and utilization tasks with the data authority or data center or public management and service agency, determine the data development purposes, data application scenarios, and sign the entrusted authorization agreement; Accept qualification review and capability assessment by data authorities and data center organizations; Rely on the public data platform to build a safe and trusted data development and utilization environment, and process the authorized public data in accordance with the principle of keeping the original data within the domain; The data products and services formed by processing can be provided to users and obtain reasonable benefits. 数字化转型网(www.szhzxw.cn)

(5) Data trading institutions

As a unified service portal for an open data platform, data trading institutions are responsible for building data trading rules and data trading platforms, formulating transaction processes, supervising data trading behaviors, promoting data products or data services to the society, and promoting the construction of an ecosystem of data development and utilization subjects.

(6) Data users

Data users have the right to legally obtain data products and services formed by the development and utilization of public data resources and use them in accordance with relevant agreements. Natural persons, legal persons and unlegal organizations are encouraged to conduct in-depth processing and value-added use of public data, activate the data multiplier effect, release the value of public data by actively creating multiple public data application scenarios, optimize resource allocation, improve production efficiency, inject new impetus into new quality productivity, and maximize the economic and social value of public data. 数字化转型网(www.szhzxw.cn)

5. Create a service system that multiplies the value of public data

In its 2021 Digital Economy Report, the United Nations considers data as a global public good. As a product of public management and public service, public data involves the public interests and public welfare of the whole society. Like water resources, public data nourishes the coordinated development of digital government, digital economy and digital society. It is a public resource shared by the whole society and needs to be taken from and used by the people.

To sum up, the public data right and responsibility relationship model divides the life cycle of public data development and utilization into data supply link, data circulation link and data utilization link. The relationship of multiple rights and responsibilities of public data is a development process from quantitative change to qualitative change, just as water droplets become streams, streams converge into rivers, rivers converge in reservoirs, and reservoirs become water plants or hydropower stations. It is also a process of energy transformation, from potential energy to kinetic energy, from kinetic energy to potential energy, and realize the mutual transformation between potential energy and kinetic energy according to energy needs, just as the flow of water gathers force to form potential energy, and the potential energy gathers and explodes more kinetic energy, and repeats and iterates constantly to produce more energy. 数字化转型网(www.szhzxw.cn)

Public data sinks streams into rivers and oceans, gathering potential energy and bursting out stronger kinetic energy, and then creating greater and stronger data value to benefit society and mankind.

On this basis, the development and utilization of public data should be closely focused on the overall idea of building a deep and domain-based data element market operation system (see Figure 3). Create “one” (data base), “two” (resource supply market and product circulation market), “three domains” (internal control domain, intermediate processing domain, external circulation domain), and “four chains” (supply chain, processing chain, value chain, and chain of supervision).

Consolidate the safe and robust data base, and promote the construction and development of the primary market for public data resources and the secondary market for the circulation of public data products and services; Create a three-domain multi-party collaborative governance system for data circulation that is “internal control domain + intermediate processing domain + external circulation domain”; Build a reliable data compliance guarantee mechanism organically composed of four chains: a reliable supply chain of compliance, a reliable processing chain of compliance, a value chain of compliance multiplication and a chain of custody of compliance traceability, and coordinate and improve the power and responsibility setting, authorization and supervision system of multi-dimensional rights such as data holding rights, management rights, operation rights, processing rights and product rights. Clarify the rights and responsibilities of data providers, aggregators, operators, developers, users, regulators and other parties, ensure the efficient and compliant circulation and utilization of data, make public data “available”, “fluid”, “well used”, and “manageable”, give play to the social benefits of public data, release the economic value of public data, and let digital China ride the trend.

本文由数字化转型网(www.szhzxw.cn)转载而成,来源于数据治理体系;编辑/翻译:数字化转型网宁檬树。

此图片的alt属性为空;文件名为%E5%AE%98%E7%BD%91%E8%AF%BB%E8%80%85%E7%BE%A42.png
免责声明: 本网站(http://www.szhzxw.cn/)内容主要来自原创、合作媒体供稿和第三方投稿,凡在本网站出现的信息,均仅供参考。本网站将尽力确保所提供信息的准确性及可靠性,但不保证有关资料的准确性及可靠性,读者在使用前请进一步核实,并对任何自主决定的行为负责。本网站对有关资料所引致的错误、不确或遗漏,概不负任何法律责任。 本网站刊载的所有内容(包括但不仅限文字、图片、LOGO、音频、视频、软件、程序等) 版权归原作者所有。任何单位或个人认为本网站中的内容可能涉嫌侵犯其知识产权或存在不实内容时,请及时通知本站,予以删除。https://www.szhzxw.cn/31832.html
联系我们

联系我们

17717556551

邮箱: editor@cxounion.org

关注微信
微信扫一扫关注我们

微信扫一扫关注我们

关注微博
返回顶部