向第三方提供个人信息应取得用户单独同意

Core Points - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize personal information collection and usage, protect personal information rights, and promote reasonable use of personal information [1][2] - Internet applications must collect personal information in a manner that minimally impacts the rights of individuals and is limited to what is necessary for providing products or services [1] - Internet applications are required to inform users of personal information collection rules prominently at the first launch and obtain explicit consent from users [1] - Internet applications are prohibited from collecting personal information of individuals other than the user through access to contacts, call logs, and SMS permissions, except when necessary for communication, adding friends, or data backup [1] - Internet applications must obtain separate consent from users before providing personal information to third parties [1] - Users must be provided with an easy option to delete their accounts, and the account deletion must be completed within 15 working days, including the deletion or anonymization of collected personal information [2]