To enhance data security management in the automotive industry and establish a robust industry-wide data security management system, this paper analyzes policies, standards, current state of data security and the compliance of enterprise data security. The following issues are identified: multiple layers of data regulation lacking effective coordination, inconsistent standards and specifications, a weak supply chain protection system, and a shortage of specialized talent. In response to these challenges, the following development suggestions are proposed: Establish a comprehensive regulatory mechanism for data security in the automotive industry. Clearly define the boundaries of responsibility for different processing entities. Accelerate the classification and grading of data, as well as the management of critical data. Enhance data security management and risk prevention awareness and capabilities throughout the entire industry chain. Strengthen the training and development of professionals specializing in comprehensive industry data security.