立规矩防范数据应用过度索权

Core Viewpoint - The recent draft regulation by the National Internet Information Office aims to address the issue of excessive data collection and clarify the boundaries for personal information collection and usage by internet applications [1][2] Group 1: Issues in Data Collection - The internet applications have long been plagued by hidden rules regarding personal information profit, such as collecting user social networks through contact permissions and using microphone access for targeted advertising [1] - Many platforms disguise excessive data collection as "experience upgrades," employing tactics like "bundled consent" and "default selections" to lead users to unknowingly disclose personal information [1] - The forced operational model not only erodes user trust but also leads to frequent data misuse, hindering healthy industry development [1] Group 2: Objectives of the Draft Regulation - The draft regulation targets the core issues in the industry, aiming to further standardize the collection and usage of personal information by internet applications [2] - Certain provisions require applications to separate core functions from non-essential permissions, allowing users to grant permissions selectively and eliminating bundled consent [2] - The regulation emphasizes the "minimum necessity" principle, mandating that permission requests must be directly related to current functions and cease immediately after the task is completed [2] Group 3: Vision for Data Ecosystem - The draft is not intended to restrict data circulation but to create a "bounded circulation" data application ecosystem, encouraging companies to focus on service quality and transparent data collection [2] - Users should regain their rights to be informed and to choose, actively monitoring permission requests and utilizing their rights to report complaints [2] - Collaborative efforts are needed among all parties to protect user rights while allowing for the valuable application of data elements, supporting the development of AI and big data [2]