App不得频繁索要个人信息权限！新规公开征集意见

Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information by internet applications, protect personal information rights, and promote reasonable use of personal information [1]. Group 1: Internet Applications - Internet applications must inform users of personal information collection and usage rules prominently at the first launch through pop-ups [1]. - A one-click access feature for personal information collection and usage rules must be provided in prominent locations within the application settings for user convenience [1]. - Applications can only request necessary personal information permissions when users are using specific features and must inform users of the purpose of use, without preemptively requesting permissions [1]. - Applications must only access camera and microphone permissions when users actively choose to use related features, and not in unrelated scenarios [1]. - The frequency of location permission requests in scenarios requiring real-time positioning should be limited to the minimum necessary for business functionality [1]. Group 2: Smart Terminals - When internet applications request permissions for calendar, call records, camera, contacts, location, microphone, phone, SMS, storage, and physical activity, the smart terminal operating system must prompt for user consent and provide options for fine-grained authorization based on time, frequency, and precision [2]. - Smart terminals must display clear indicators at prominent positions, such as the top of the screen, to inform users of currently accessed permissions like microphone, camera, and location [2]. - Smart terminal manufacturers must verify the true identity and contact information of internet application operators when processing pre-installation requests, and will not pre-install applications that do not provide this information or have no personal information collection rules or account deletion options [2].