Abstract:

[Objective] From the perspective of compliance, this paper comprehensively reviews and analyzes the principles and applications of ten cutting-edge data security technologies, aiming to promote the research and development of data security compliance and privacy protection in China.[Methods] Based on security requirements and compliance challenges, the data security construction is divided into three kinds of scenarios: user privacy compliance, data security governance, and data sharing and computing. The ten innovative technologies, such as differential privacy, sensitive data identification, user entity behavior analysis, security multi-party computing, and federal learning, are described in these three scenarios. The application status and challenges in the industry are also presented.[Results] Based on the analysis, these ten technologies can not only improve the level of data security and privacy protection of enterprises, but also satisfy some specific compliance requirements of the EU General Data Protection Regulation and China Cybersecurity Law. [Conclusions] In general, the legislation and regulation of global data security regulations have aroused high security and compliance demands, which brings new development opportunities for data security technology. There is no doubt that some of these emerging technologies still face several critical challenges in a wide range of commercial applications, and more efforts and explorations are needed in the future.

Key words: data security, privacy protection, security compliance, differential privacy, federal learning