违规收集个人信息！兴业证券等7家金融机构APP被通报

Core Points - The National Cybersecurity Notification Center reported that 64 mobile applications were found to illegally collect and use personal information, including apps from 7 financial institutions [1][5] - The violations involved 13 types of misconduct, with 5 major categories identified as "high-risk" behaviors [3][4] Group 1: Financial Institutions - Four brokerage firms and three banks were named, including Chengtong Securities, Xingye Securities, Shengan Securities, Wukuang Securities, Longjiang Bank, Wuhai Bank, and Haixia Bank [1][5] - Specific issues included failure to inform users about the recipients of their personal information and not obtaining separate consent, affecting apps from Chengtong Securities, Haixia Bank, Xingye Securities, and Wukuang Securities [6] - Chengtong Securities did not implement necessary security measures such as encryption, while Xingye Securities failed to provide users with a way to withdraw consent for data collection [6] Group 2: Violations and Categories - The five major categories of violations included: 1. Lack of clear notification to users about privacy policies at the first app launch [3] 2. Incomplete privacy policies that did not specify the purposes, methods, and scope of personal information collection [3] 3. Failure to inform users about the transfer of their personal information to other parties [3][6] 4. No provision for users to easily withdraw consent for data collection [4][6] 5. Inadequate security measures such as encryption and de-identification [4] - Other industries affected included food and beverage, gaming, transportation, and lifestyle services, with notable brands like Starbucks, Hualala, and others being implicated [7]