The Cybersecurity Law，the Data Security Law，the Personal Information Protection Law，and the Regulation on the Security and Protection of Critical Information Infrastructure have established a basic framework of data security in the medical field. And supporting regulations and policies have been issued by the state and various departments. It is clarified that，in the medical data field，we shall establish and improve the data security management system，the data classification and classification protection system，the full life cycle security assurance system，the data cross-border flow system and the data security evaluation system. At present，with the development of medical business，there are still risks of illegal handling of data in its collection，storage，use，sharing and destruction. To ensure the security management of medical data，all the parties shall undertake their relevant legal obligations and assume responsibilities，and provide new solutions for data security and compliance detection in the health industry through emerging technologies such as visual real-time monitoring，blockchain，privacy computing，etc.，to contribute to automatic and efficient data security management.