打击力度加大 多家险企APP因侵犯用户权益被通报

Core Viewpoint - The insurance industry faces increasing compliance risks related to personal information protection as digital transformation progresses and regulatory frameworks improve [1][6] Group 1: Compliance Issues - The Shanghai Communications Administration reported that 3 insurance institutions had 8 apps (SDKs) flagged for issues such as lack of clarity in personal information processing rules and difficulties in account cancellation [1] - In total, over 20 apps (SDKs) from 9 insurance institutions have been flagged in 2025, indicating a systemic issue within the industry regarding personal information protection [1][2] - Other regions have also reported similar compliance issues, highlighting a widespread problem across the insurance sector [2][3] Group 2: Systemic Shortcomings - The frequent notifications reveal systemic shortcomings in personal information protection within the insurance industry, characterized by opaque rules, excessive data collection, and inadequate complaint handling [3] - The underlying issues stem from a misalignment in incentive mechanisms, capability systems, and responsibility chains within insurance institutions [3][4] Group 3: Regulatory Developments - Recent regulations, including the Personal Information Protection Law and the Data Security Law, have been implemented to enhance data governance and compliance in the financial sector [6][7] - The Financial Regulatory Authority has emphasized the need for insurance companies to shift from reactive compliance to proactive measures in personal information protection [7][8] Group 4: Recommendations for Improvement - To enhance data governance and personal information protection, the insurance industry should consider restructuring governance frameworks, leveraging technology for data security, and establishing comprehensive responsibility mechanisms for third-party collaborations [8]