At present, the technical protection of university data security mostly relies on traditional network security measures, lacking systematic full-life-cycle protection and technical planning. This paper proposed a university data security technical architecture based on a multi-layer capability model. Integrating data life-cycle management and risk control, and drawing on the data security governance (DSG) model and data security capability maturity model (DSMM), the architecture realized comprehensive data protection through hierarchical design. The architecture consisted of the network security foundation layer, data security tools layer, data security application scenarios layer, data security operation layer, and objective layer, covering the stages of data collection, storage, transmission, use, and destruction, thereby ensuring data confidentiality, integrity, and availability. Featuring strong scalability, the architecture can accommodate the diverse demands of different universities, and support phased implementation and continuous improvement, providing a feasible technical solution for the development of university data security systems.