迪奥（上海）公司被罚！

Group 1 - The core issue involves the investigation of Dior (Shanghai) Company for failing to fulfill personal information protection obligations, leading to administrative penalties [1] - The company transmitted user personal information to its headquarters in France without conducting a security assessment or establishing standard contracts for data export [1] - Dior (Shanghai) did not adequately inform users about the handling of their personal information by the overseas recipient nor obtain separate consent from users [1] Group 2 - The company failed to implement necessary security measures such as encryption and de-identification for the collected personal information [1] - The local public security authority has imposed administrative penalties on Dior (Shanghai) in accordance with the Personal Information Protection Law [1] - The case serves as a warning for personal information handlers to comply with legal principles and regulations regarding the processing and cross-border provision of personal information [1]