违规收集使用个人信息 4家券商及3家银行APP被通报

Core Viewpoint - The National Cybersecurity Notification Center has reported that over 60 mobile applications, including those from seven financial institutions, are found to be illegally collecting and using personal information [1][2][3] Group 1: Violations Identified - A total of 13 types of violations were identified among the 60+ mobile applications [2] - The most common violations include: - Lack of detailed privacy policies outlining the purpose, method, and scope of personal information collection, affecting 25 applications including those from Longjiang Bank and ShenGang Securities [1][2] - Failure to provide users with a way to withdraw consent for personal information collection, impacting 30 applications including those from Industrial Bank and Hainan Airlines [2] - Inadequate security measures such as encryption and de-identification, affecting 29 applications including those from Chengtong Securities and Zhilian Recruitment [2] Group 2: Financial Institutions Involved - The financial institutions implicated include four brokerages: Chengtong Securities, Industrial Bank, ShenGang Securities, and Wukuang Securities, as well as three banks: Longjiang Bank, Wuhai Bank, and Haixia Bank [1][2] - Specific versions of the mobile applications that were flagged include: - Chengtong Securities (version 6.0.3.0), ShenGang Securities (version 3.1.7), Industrial Bank (version 8.9.0), Wukuang Securities (version 3.40.2), Wuhai Bank (version 5.0.1), Haixia Bank (version 4.0.0), and Longjiang Bank (version 2.00.03) [2][3] Group 3: Broader Implications - The violations are not limited to financial applications; they also encompass a wide range of sectors including dining, gaming, recruitment, and lifestyle services [2] - The National Cybersecurity Notification Center has released six lists of violating mobile applications since 2025, indicating a persistent issue within the industry [3] - The central authorities are conducting a series of special actions to protect personal information, with a focus on addressing typical violations and ensuring compliance [3]