21世纪经济报道·2025-11-23 14:31Core Viewpoint - The article discusses the newly released draft regulations for personal information protection by large internet platforms in China, emphasizing the responsibilities and obligations these platforms must adhere to in safeguarding user data [1][3]. Group 1: Regulatory Framework - The draft regulations define large internet platforms based on user scale, specifically those with over 50 million registered users or 10 million monthly active users [5]. - Major companies like Tencent, Alibaba, ByteDance, and emerging AI firms such as DeepSeek and MiniMax are included under this definition, indicating a broader scope of regulation [3][5]. - The principle of "with great power comes great responsibility" is highlighted, indicating that larger platforms will face stricter compliance requirements [1][3]. Group 2: Compliance Requirements - Large platforms are required to establish dedicated personal information protection teams responsible for creating and implementing internal management systems and emergency response plans [10]. - The regulations mandate that personal information collected within China must be stored in domestic data centers, and platforms must conduct compliance audits and risk assessments [11]. - There is an emphasis on the need for platforms to publish social responsibility reports regarding personal information protection, which has previously been inadequately addressed by many companies [10]. Group 3: Independent Oversight - The draft regulations propose the establishment of independent supervisory committees composed mainly of external members to oversee personal information protection practices [13][15]. - These committees are tasked with monitoring compliance, evaluating the protection of sensitive personal information, and ensuring regular communication with users [15]. - Concerns are raised about the feasibility of these committees, as many platforms have yet to take significant steps towards establishing them [14].