国家计算机病毒应急处理中心检测发现64款违法违规收集使用个人信息的移动应用

Core Viewpoint - The National Cybersecurity Center has reported that 64 mobile applications are found to be in violation of personal information protection laws, highlighting significant issues in user consent and data handling practices [1][2][3][4][5][6][7][8][9][10][11] Group 1: User Consent and Information Handling - 10 applications failed to provide clear notifications for users to read privacy policies before data collection [1] - 25 applications did not specify the purposes, methods, and scope of personal information collection in their privacy policies [2] - 14 applications did not inform users about the transfer of their personal information to other parties, nor did they obtain explicit consent [3] - 2 applications began collecting personal information without obtaining user consent [4] Group 2: User Rights and Complaint Handling - 8 applications either did not provide or did not respond timely to requests for correcting or deleting personal information [5] - 5 applications failed to process complaints and reports within the promised timeframe [6] - 30 applications did not offer users a straightforward way to withdraw consent for data collection [7] Group 3: Sensitive Information and Security Measures - 4 applications used automated decision-making for marketing without providing options to refuse or alternatives [8] - 3 applications processed sensitive personal information without obtaining separate consent from users [9] - 29 applications did not implement adequate security measures such as encryption or anonymization [10] Group 4: Advertising and Privacy Policies - 2 applications had advertisements that could not be closed easily [9] - 6 applications lacked a privacy policy altogether [10]