Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information, protect individual rights, and promote reasonable utilization of personal information [1] Group 1: Regulations on Personal Information Collection - The draft stipulates that the collection and use of personal information should minimize the impact on the rights of individuals and be limited to what is necessary for providing products or services, prohibiting excessive collection [1] - Internet applications must inform users of the rules regarding personal information collection and usage prominently at the first launch, obtaining explicit consent from users under fully informed conditions [1] Group 2: Restrictions on Data Access and Sharing - Internet applications are prohibited from collecting personal information of individuals other than the user through access to contacts, call records, and SMS permissions, except when necessary for communication, adding friends, or data backup [1] - Any provision of personal information to third parties by internet applications requires separate consent from the user [1] Group 3: User Account Management - Internet applications must provide a convenient function for users to cancel their accounts, and upon account cancellation, the application is required to complete the process within 15 working days, deleting or anonymizing the collected personal information [1]

Core Points - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize personal information collection and usage, protect personal information rights, and promote reasonable use of personal information [1][2] - Internet applications must collect personal information in a manner that minimally impacts the rights of individuals and is limited to what is necessary for providing products or services [1] - Internet applications are required to inform users of personal information collection rules prominently at the first launch and obtain explicit consent from users [1] - Internet applications are prohibited from collecting personal information of individuals other than the user through access to contacts, call logs, and SMS permissions, except when necessary for communication, adding friends, or data backup [1] - Internet applications must obtain separate consent from users before providing personal information to third parties [1] - Users must be provided with an easy option to delete their accounts, and the account deletion must be completed within 15 working days, including the deletion or anonymization of collected personal information [2]

Core Viewpoint - The National Internet Information Office has drafted regulations to standardize the collection and use of personal information by internet applications, aiming to protect personal information rights and promote reasonable utilization of personal data [1] Group 1: Regulations on Personal Information Collection - The draft regulations state that the collection and use of personal information should minimize the impact on the rights of individuals and be limited to what is necessary for providing products or services, prohibiting excessive data collection [1] - Internet applications are required to inform users of personal information collection and usage rules prominently at the first launch, obtaining explicit consent from users after they are fully informed [1] Group 2: Restrictions on Data Sharing - Internet applications are prohibited from collecting personal information of individuals other than the user, except when necessary for communication, adding friends, or data backup [1] - Any sharing of personal information with third parties must be accompanied by separate consent from the user [1] Group 3: User Account Management - Internet applications must provide a convenient feature for users to delete their accounts, and upon account deletion, they are required to complete the process within 15 working days, either deleting the collected personal information or anonymizing it [1]

Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information, protect individual rights, and promote reasonable utilization of personal data [1] Group 1: Principles of Data Collection - The collection and use of personal information must adhere to the principles of legality, legitimacy, necessity, and good faith [1] - Personal information should not be collected through misleading, fraudulent, or coercive methods [1] - The collection of personal information should be limited to what is necessary for providing products or services and should not exceed the required scope [1] Group 2: Restrictions on Data Access - Internet applications are prohibited from collecting personal information of individuals other than the user through access to contacts, call records, or SMS, except when necessary for communication, adding friends, or data backup [1] - Internet applications must obtain separate consent from users before providing personal information to third parties [1] Group 3: User Rights and Account Management - Internet applications are required to provide users with an easy way to cancel their accounts [1] - Upon account cancellation, internet applications must complete the process within 15 working days and delete or anonymize the collected personal information [1]

Group 1 - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize personal information collection and usage, protect personal information rights, and promote reasonable use of personal information [1][4] - Internet applications must inform users of personal information collection rules prominently at the first launch and provide easy access to these rules in the settings [1] - Applications can only request necessary personal information permissions when users are using specific features and must inform users of the purpose of data collection, without preemptively asking for permissions [1] Group 2 - Smart terminal operating systems must prompt users for consent when applications request permissions for calendar, call records, camera, contacts, location, microphone, phone, SMS, storage, and physical activity, offering refined authorization options based on time, frequency, and precision [2] - Smart terminals must clearly indicate the permissions currently being accessed, such as microphone, camera, and location, using easily understandable icons [2] - Manufacturers of smart terminals must verify the identity and contact information of internet application operators when processing pre-installation requests, denying requests from those who do not provide accurate information or lack personal information collection rules [2] Group 3 - The deadline for feedback on the draft regulations is February 9, 2026 [3]

Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information by internet applications, protect personal information rights, and promote reasonable use of personal information [1]. Group 1: Internet Applications - Internet applications must inform users of personal information collection and usage rules prominently at the first launch through pop-ups [1]. - A one-click access feature for personal information collection and usage rules must be provided in prominent locations within the application settings for user convenience [1]. - Applications can only request necessary personal information permissions when users are using specific features and must inform users of the purpose of use, without preemptively requesting permissions [1]. - Applications must only access camera and microphone permissions when users actively choose to use related features, and not in unrelated scenarios [1]. - The frequency of location permission requests in scenarios requiring real-time positioning should be limited to the minimum necessary for business functionality [1]. Group 2: Smart Terminals - When internet applications request permissions for calendar, call records, camera, contacts, location, microphone, phone, SMS, storage, and physical activity, the smart terminal operating system must prompt for user consent and provide options for fine-grained authorization based on time, frequency, and precision [2]. - Smart terminals must display clear indicators at prominent positions, such as the top of the screen, to inform users of currently accessed permissions like microphone, camera, and location [2]. - Smart terminal manufacturers must verify the true identity and contact information of internet application operators when processing pre-installation requests, and will not pre-install applications that do not provide this information or have no personal information collection rules or account deletion options [2].