The "Cyber Security Law" clearly puts forward that the state implements the network trusted identity strategy and the network trusted identity authentication system is the core of network security. Support research and development of safe and convenient e-authentication technology and promote mutual recognition between different e-authentication. Promote the interconnection of the existing network identity authentication systems and establish a cross-platform network trusted identity system.

The identity security standard of Classfied Cybersecurity Protection 2.0 is divided into three parts: identity authentication, access control and security audit.

GDPR requires all organizations to use personal data only with the consent of individuals, and individuals can withdraw the right to use it at any time; Enterprises are required to sort out their current distribution of personal information assets to ensure that users have the only place to correct this information; At the request of users, user data can be transferred from one organization to another.

PSD2 opens some special features to consumers from the payment aspect. PSD2 has many aspects of security requirements, including users, terminals, edges and frames. The infrastructure also includes CIA, encryption. PSD2 considers risk analysis as a necessary part of verification. The risk elements include physical location, IP address, working hours, device ID, device fingerprint, user attributes, etc.