By analyzing data security in the medical industry, the paper points out hazards existing in data security and reasons for data leakage. In combination with characteristics of medical institutions, it elaborates strategies for protecting data security with an emphasis on technical protection, including identity authentication, discretionary access control, etc.