The problem of big data security involves personal, social and nationalsecurity. As a legal field to protect data security, administrative punishmentis in line with the governance goal of data security. Therefore, administrativepunishment is one of the important areas of the protection and regulationof data security. However, due to the characteristics of data as virtual, scale,unlimited replicability and assets, the regulation of administrative punishmentin data security is different from that of traditional entity scenarios, resultingin the lack of systematic regulation path. Therefore, the basic principles ofadministrative law can be applied, and the experience of comparative law can beused to build a legal system adapted to data security protection and regulation.