涉个人信息使用违规，大智慧、中山证券等金融类App被通报

Core Viewpoint - The National Cybersecurity Incident Response Center has identified 72 mobile applications that illegally collect and use personal information between December 26, 2025, and January 20, 2026 [1] Group 1: Financial Apps Involved - Several financial apps are among the 72 identified, including Zhongshan Securities, Dazhihui, Guotai Junan Futures, and Wenkang Futures [2][3] - Dazhihui has the highest number of violations, totaling six specific issues related to user consent and privacy policy transparency [4] Group 2: Specific Violations of Dazhihui - The app failed to clearly prompt users to read the privacy policy upon first use and used default consent mechanisms [4] - The privacy policy did not adequately detail the purposes, methods, and scope of personal information collection [4] - Dazhihui did not inform users about third parties receiving their personal information without explicit consent [4] - The app lacked effective features for users to correct, delete personal information, or cancel their accounts [5] - There was no easy way for users to withdraw consent for personal information collection [5] - The app did not have specific rules for handling personal information of minors and did not obtain parental consent [5] Group 3: Regulatory Attention on Financial Apps - Financial apps, particularly brokerage apps, have been under increasing regulatory scrutiny, with multiple apps being named for violations in 2025 [6] - The Shanghai Communications Administration reported several brokerage apps, including Shenwan Hongyuan and Dongfang Securities, for similar issues [6] - Legal experts emphasize the need for enhanced user identity verification and transaction monitoring to protect user rights in financial apps [6]