互联网应用程序个人信息保护
Search documents
规范互联网应用程序个人信息收集使用
Ren Min Ri Bao· 2026-01-12 07:54
Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information by internet applications, protect personal information rights, and promote reasonable use of personal information [1] Group 1: User Consent and Information Collection - Internet applications must inform users of personal information collection and usage rules prominently at the first launch, obtaining explicit consent from users [1] - Applications are prohibited from collecting personal information of individuals other than users through access to contacts, call logs, and SMS, except when necessary for communication, adding friends, or data backup [1] - Applications must obtain separate consent from users before providing personal information to third parties [1] Group 2: Account Management - Internet applications are required to provide a convenient function for users to cancel their accounts [1] - Upon account cancellation, applications must complete the account deletion within 15 working days and either delete the collected personal information or anonymize it [1]
应为用户提供账号注销便捷功能
Xin Lang Cai Jing· 2026-01-11 06:51
Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information, protect individual rights, and promote reasonable utilization of personal information [1] Group 1: Regulations on Personal Information Collection - The draft stipulates that the collection and use of personal information should minimize the impact on the rights of individuals and be limited to what is necessary for providing products or services, prohibiting excessive collection [1] - Internet applications are required to inform users of the rules regarding personal information collection and usage through prominent means, such as pop-ups, at the first launch, and must obtain explicit consent from users [1] Group 2: User Rights and Data Handling - Internet applications are prohibited from collecting personal information of individuals other than the user, except when necessary for communication, adding friends, or data backup [1] - Applications must obtain separate consent from users before providing personal information to third parties [1] - Users must be provided with a convenient option to delete their accounts, and applications are required to complete the account deletion process within 15 working days, including deleting or anonymizing collected personal information [1]
网信办起草新规防App偷听
Bei Ke Cai Jing· 2026-01-10 12:25
Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" and is currently seeking public feedback on it [1]. Group 1: Regulations Overview - The draft stipulates that internet applications should only access camera and microphone permissions when users actively choose to use features such as taking photos, sending voice messages, or recording [1]. - It prohibits the use of camera and microphone permissions in unrelated scenarios or after users have stopped using the relevant features [1].
网信办起草新规 拟定APP应提供注销账号便捷功能
Bei Ke Cai Jing· 2026-01-10 12:25
Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" and is seeking public feedback on it [1] Group 1: User Account Management - Internet applications must provide users with an easy way to cancel their accounts [1] - Upon account cancellation, internet applications cannot require users to provide additional personal information beyond what has already been collected, except for necessary cases related to preventing illegal activities and security risk control [1] - Internet applications are required to complete account cancellation within 15 working days and delete or anonymize the collected personal information, unless otherwise stipulated by laws and regulations [1]
国家网信办就《互联网应用程序个人信息收集使用规定(征求意见稿)》公开征求意见
Yang Shi Wang· 2026-01-10 08:13
Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Public Comment)" to standardize the collection and use of personal information by internet applications, protect personal information rights, and promote reasonable use of personal information [1][2]. Group 1: General Principles - The regulations aim to protect personal information rights and promote reasonable use based on existing laws such as the Cybersecurity Law and the Personal Information Protection Law [2]. - Internet applications operating within China must comply with these regulations when collecting and using personal information [2]. - Collection and use of personal information must adhere to principles of legality, necessity, and integrity, and must not involve misleading or coercive practices [3]. Group 2: Responsibilities and Transparency - Internet application operators are responsible for the collection and use of personal information and must conduct effective audits of third-party software development kits (SDKs) [3][4]. - Operators must provide clear and transparent information regarding the collection and use of personal information, including the purpose, method, and types of data collected [5][6]. Group 3: User Consent and Rights - User consent is required for the collection of personal information, especially sensitive data, and users must be informed of their rights to access, modify, and delete their information [6][11]. - Internet applications must not refuse service based on a user's refusal to provide personal information unless it is essential for service delivery [3][10]. Group 4: Security and Compliance - Operators must implement adequate management and technical measures to protect personal information, especially for minors [11][36]. - In case of data breaches, operators are required to inform users and relevant authorities promptly [21][36]. Group 5: Industry Standards and Oversight - Industry organizations are encouraged to establish self-regulatory mechanisms and standards for personal information protection [4]. - The National Internet Information Office and other relevant authorities will oversee compliance with these regulations [19][20].