In the era of digital economy, data has become a high-energy fuel for digital operation of enterprises and an essential asset. With the trend of digitalization, enterprise data security compliance has also become an important subject. Especially in the last two years, in order to guard against increasing and increasing information security risks, our country accelerates the legislation on network security and data compliance, from the legal system and supervision system.
In 2021, in order to prevent data security risks, the regulatory authorities carried out a number of special governance activities on data security and App privacy protection. In addition, the state has also promulgated the Data Security Law and the Personal Information Protection Law, which, together with the National Security Law promulgated in 2015, is called the "troika" in the field of data security. The implementation of the three basic laws also marks that data security is moving towards the era of compliance.
In the face of the first year of Chinese data security legal system, Whale Zuoji, an all-domain digital operation service provider, and Beijing Dacheng Law Firm jointly issued the White Paper on Privacy Protection (hereinafter referred to as the White Paper), aiming to provide feasible technical solutions and implementation strategies from the level of network security and data security governance. Help enterprise customers improve their data security capabilities from the technical and management aspects to ensure data security.
Based on the current data security situation and policy background, the White Paper interprets in detail the compliance practices of Whale strategy related services and products from six aspects: data collection, data transmission, data storage, data commissioning, data deletion and destruction, and access rights mechanism, and demonstrates Whale strategy security related qualification certification. Develop a compliance co-construction mechanism with customers and suppliers, and deliver the business philosophy of Whale strategy, as an all-domain digital operation service provider, to "actively practice data security and compliance, and escort customers' digital operation in all directions".
Whale has always attached great importance to privacy protection. It has established a complete data compliance and risk control system in accordance with the Network Security Law of the People's Republic of China, the Personal Information Protection Law of the People's Republic of China and the Data Security Law of the People's Republic of China, and actively complied with the privacy ethics in the era of digital economy. Data protection for customers, users, employees and other relevant parties will be integrated into the default values, and become an important baseline for ethical performance. For Whale strategy, privacy protection is not only legal compliance, but also an important baseline for trust, cooperation and ethical performance.
For the enterprise clients, Whale strategy mainly starts from three aspects: organizational structure, risk assessment and control mechanism, and compliance training, and refines the business process. The compliance solutions are presented from six aspects: data collection, data transmission, data storage, data commissioning, data deletion and destruction, and access mechanism.
In addition to strictly practicing the guidelines of data security and compliance in the provision of products and technical services, Whale strategy also establishes compliance co-construction mechanisms with customers and suppliers respectively, and builds a privacy protection ecosystem around the upstream and downstream of the industrial chain.
At present, Whale Jizhi has passed ISO27001, ISO27701, ISO20000 IT, as well as "National information security Level protection Level three certification", becoming a multi-certification SaaS software service provider in MarTech industry. At the same time, Whale Strategy also has the security engineering enterprise Level 3 certification, penetration test report, network security detection report and other related qualification certification report.
In order to gain a timely insight into the trends and new standards related to data security, Whale also maintains close contact and cooperation with competent authorities such as China Institute of Standardization, China Academy of Information and Communications Technology, National Committee of Information Security Standardization, China Association of Internal Audit, etc., on information security and data privacy compliance issues.
In addition, Whale Strategy is also a member of Information security Standardization WG4 working group, a member of personal information protection compliance audit pilot plan, and has participated in the drafting and review of Information Security Technology facial recognition Data Security Requirements (draft).
Whale Strategy is a professional comprehensive digital marketing operation platform in China. Its service system has widely covered food and beverage, beauty and skin care, fashion shoes and clothing, light luxury jewelry, automobile service, medicine and health and other industries. After years of intensive work and iterative upgrading, Whale's strategy has already deeply imstamped the consciousness of "data security compliance" into its service genes. Combined with its rich business application scenarios and practical experience, Whale's strategy develops data security compliance plans and countermeasures around the whole life cycle of customers. And set up a professional information security team in the internal responsible for hacker intrusion prevention, data security, information security management for the overall control.
