Workflow
可信数字身份战略
icon
Search documents
公安部有关部门负责人就《国家网络身份认证 公共服务管理办法》答记者问
Yang Shi Wang· 2025-05-23 10:24
Core Viewpoint - The introduction of the "National Network Identity Authentication Public Service Management Measures" aims to establish a reliable digital identity system to enhance personal information protection and support the development of the digital economy, effective from July 15, 2025 [1][2][3]. Background - The rapid growth of the internet and digital economy has led to an increased demand for reliable personal identity authentication services, highlighting issues such as unauthorized data collection and the need for a trustworthy digital identity framework [2]. - The Chinese government emphasizes the importance of personal information protection and the establishment of a digital identity management system in various national policies and plans [2]. Legal Basis - The management measures are supported by several laws, including the Cybersecurity Law, Personal Information Protection Law, and Anti-Telecom Fraud Law, which advocate for the development of secure electronic identity authentication technologies [4]. Main Content of the Management Measures - The management measures consist of 16 articles covering four main areas: definitions and application of national network identity authentication services, responsibilities of platforms regarding data security and personal information protection, and special provisions for minors [5]. Data Protection and Information Handling - The management measures stipulate that internet platforms must minimize the collection of personal information and only gather data necessary for identity verification, adhering to the principle of "minimum necessity" [7]. - The measures require that personal information processing must comply with legal obligations, including obtaining user consent for sensitive data handling [7][8]. Data Security Regulations - The management measures mandate that public service platforms implement robust security management systems and technical safeguards to protect data and personal information [8]. - Important data must be stored domestically, and any international data transfer must undergo security assessments [8]. Public Feedback and Revisions - The public consultation period received over 17,000 suggestions, indicating strong public support for the management measures, with significant increases in app downloads and service applications during this time [10][11]. Advantages of National Network Identity Authentication Service - The service offers several advantages over existing authentication methods, including authority based on official identification, enhanced security through anonymization, and convenience for users [13][14]. - It is designed to be a public service, providing free access to businesses for legally required identity verification, thus reducing costs and improving user experience [14]. Data Security Measures - The platform has established a comprehensive security framework that includes data classification, lifecycle protection, and strict access controls to ensure data security [15]. - Regular security drills and assessments are conducted to maintain a proactive defense against potential data breaches [15].
六部门联合公布《国家网络身份认证公共服务管理办法》
news flash· 2025-05-23 10:06
Core Points - The article discusses the implementation of the "National Network Identity Authentication Public Service Management Measures," which will take effect on July 15, 2025, aimed at enhancing digital identity security and supporting the digital economy [1][2][9] Group 1: Public Service Framework - The public service refers to a national platform that provides services such as applying for network numbers and certificates, and verifying identity based on legal identification documents [2][3] - The network number is a non-explicit identity symbol composed of letters and numbers, while the network certificate carries the network number and non-explicit identity information [2][3] Group 2: User Participation and Rights - Individuals with valid legal identification can voluntarily apply for a network number and certificate, with parental consent required for minors [3][4] - Internet platforms must ensure equal service for users who do not use network numbers or certificates but have verified their identity through other means [4] Group 3: Data Protection and Privacy - Internet platforms are prohibited from requiring users to provide explicit identity information if they have verified their identity using network numbers or certificates, except as required by law or with user consent [4][5] - The public service platform is limited to collecting only the information necessary for identity authentication and must inform users about data processing practices [5][6] Group 4: Security and Compliance - The public service platform must implement security measures to protect data and personal information, ensuring that important data is stored domestically [7][8] - Violations of the management measures can lead to penalties under relevant laws, and responsible parties may face legal consequences [8][9]