国家网信办公开征求意见：大型网络平台设立个人信息保护监督委员会

Core Points - The draft regulation aims to guide and standardize the establishment and operation of personal information protection supervisory committees by large internet platforms, ensuring compliance with personal information protection laws and enhancing the protection of individual rights [1][3][10] Group 1: Establishment and Composition of Supervisory Committees - Large internet platforms must establish a personal information protection supervisory committee with a minimum of 7 members, where external members should constitute at least two-thirds of the total [3][4] - External members must possess professional knowledge in personal information protection and should not hold any other positions within the platform [2][5] - The supervisory committee is an independent body primarily composed of external members to oversee the platform's personal information protection practices [2][3] Group 2: Responsibilities and Operations - The supervisory committee is responsible for monitoring various aspects of personal information protection, including compliance systems, sensitive information handling, and user rights [10][12] - Regular meetings must be held at least every three months, with decisions requiring a two-thirds majority agreement from members [11][12] - The committee must maintain communication with users to gather feedback and address concerns regarding personal information protection [10] Group 3: Member Qualifications and Independence - External members must meet specific independence criteria, including not having direct or indirect financial interests in the platform [4][5] - Members are required to have at least three years of relevant experience in personal information protection and must maintain a good reputation [5][6] - The platform must ensure that the appointment process for external members is transparent and based on their qualifications [6][7] Group 4: Reporting and Accountability - The supervisory committee must submit an annual report on its activities to the provincial internet information department [14][15] - Any violations of the regulations by the platform can lead to penalties under existing personal information protection laws [29][30] - The provincial internet information department is responsible for overseeing the implementation of these regulations and can require the dissolution of non-compliant committees [16][27]