2月9日，工业和信息化部公开征求《智能终端匿名标识符数据安全技术要求》强制性国家标准制修订计 划项目意见。其中明确，该标准文件适用于移动智能终端、智能网联汽车等终端设备匿名标识符及互联 网应用程序收集使用匿名标识符的设计、开发、测试和评估。 ...

Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information by internet applications, protect personal information rights, and promote reasonable use of personal information [1] Group 1: User Consent and Information Collection - Internet applications must inform users of personal information collection and usage rules prominently at the first launch, obtaining explicit consent from users [1] - Applications are prohibited from collecting personal information of individuals other than users through access to contacts, call logs, and SMS, except when necessary for communication, adding friends, or data backup [1] - Applications must obtain separate consent from users before providing personal information to third parties [1] Group 2: Account Management - Internet applications are required to provide a convenient function for users to cancel their accounts [1] - Upon account cancellation, applications must complete the account deletion within 15 working days and either delete the collected personal information or anonymize it [1]

Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize personal information collection and usage, protect individual rights, and promote reasonable use of personal information [1] Group 1: Regulations on Information Collection - Internet applications must inform users of personal information collection and usage rules prominently at the first launch, obtaining explicit consent from users [1] - Applications are prohibited from collecting personal information of individuals other than users through access to contacts, call logs, and SMS, except when necessary for communication, adding friends, or data backup [1] - Personal information can only be provided to third parties with separate consent from users [1] Group 2: User Rights and Account Management - Internet applications must offer a convenient account cancellation feature for users [1] - Upon account cancellation, applications are required to complete the process within 15 working days, deleting or anonymizing the collected personal information [1]

Core Viewpoint - The draft regulation aims to standardize the collection and use of personal information by internet applications, ensuring the protection of individual rights and promoting reasonable utilization of personal data [1] Group 1: Collection and Use of Personal Information - The draft stipulates that the collection and use of personal information should minimize the impact on individual rights and be limited to what is necessary for providing products or services [1] - It emphasizes that personal information must be collected in a lawful, fair, necessary, and honest manner, without misleading or coercive practices [1] - Internet applications must inform users of the collection rules and obtain their consent, especially for sensitive personal information [1][2] Group 2: User Consent and Notification - Internet applications are required to notify users of personal information collection rules prominently at the first launch and obtain explicit consent [2] - Any updates to the personal information collection rules must be communicated to users through noticeable methods, such as pop-ups, and require re-consent [2][4] - Applications must not collect information from third parties without user consent, except for specific functionalities like contact management [2] Group 3: Biometric Data and Minor Protection - The collection of biometric data (e.g., facial, fingerprint, voice recognition) must have specific purposes and be necessary, with strict protective measures in place [3] - Biometric data should be stored locally on devices and not transmitted over the internet unless legally required or with user consent [3] - Special rules must be established for collecting information from minors under 14, requiring parental consent [3] Group 4: Updates and Permissions Management - Applications with over 50 million registered users or 10 million monthly active users must publicly solicit opinions on updates to their personal information collection rules [4] - The draft also mandates that smart devices must obtain user consent for accessing various permissions and provide detailed options for granular control [4][5] - Smart devices should transparently record and display the usage of permissions by applications, ensuring users are informed about data access [5]

Core Viewpoint - China has released a draft for public consultation regarding the collection and use of personal information by internet applications, aiming to protect user rights and enhance transparency [1] Group 1: Regulatory Framework - The National Internet Information Office announced that internet applications must fully inform users about the rules for collecting and using personal information and obtain consent from the information subjects [1] - The draft stipulates that operators of internet applications and software development kits are responsible for the collection, use, and security of personal information [1] Group 2: Key Requirements - Key requirements include providing options for refined authorization models, prohibiting unnecessary or unauthorized data collection, and strictly implementing protections for minors' personal information and biometric data [1] - Internet applications are required to only access camera and microphone permissions when users actively choose to use features such as taking photos or sending voice messages, and must not access these permissions in unrelated scenarios [1]

Core Viewpoint - The draft regulation on personal information collection and usage by internet applications emphasizes minimal impact on user rights and limits data collection to what is necessary for providing products or services [1] Group 1: Regulation Overview - The draft regulation requires internet applications to inform users about personal information collection rules prominently at the first launch, obtaining explicit consent from users [1] - It prohibits the collection of personal information from third parties, such as contacts and call records, unless necessary for specific functions like communication or data backup [1] - Internet applications must obtain separate consent from users before sharing personal information with third parties [1] Group 2: User Rights and Account Management - The draft regulation mandates that internet applications provide a convenient option for users to delete their accounts [1] - Upon account deletion, applications are required to complete the process within 15 working days and either delete the collected personal information or anonymize it [1]

Core Viewpoint - The draft regulation on personal information collection and usage by internet applications emphasizes minimizing the impact on individual rights and limiting data collection to what is necessary for providing products or services [1] Group 1: Personal Information Collection - The draft stipulates that internet applications must inform users of personal information collection rules prominently at the first launch and obtain explicit consent from users [1] - It prohibits the collection of personal information from third parties, such as contacts and call records, unless necessary for communication, friend addition, or data backup [1] Group 2: User Rights and Account Management - Internet applications are required to provide a convenient option for users to delete their accounts [1] - Upon account deletion, applications must complete the process within 15 working days and either delete the collected personal information or anonymize it [1]

Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information, protect individual rights, and promote reasonable utilization of personal information [1] Group 1: Regulations on Personal Information Collection - The draft stipulates that the collection and use of personal information should minimize the impact on the rights of individuals and be limited to what is necessary for providing products or services, prohibiting excessive collection [1] - Internet applications must inform users of the rules regarding personal information collection and usage prominently at the first launch, obtaining explicit consent from users after they are fully informed [1] Group 2: User Rights and Data Handling - Internet applications are prohibited from collecting personal information of individuals other than the user, except when necessary for communication, adding friends, or data backup [1] - If personal information is to be provided to third parties, explicit consent from the user must be obtained [1] - The draft requires internet applications to offer a convenient account cancellation feature, ensuring that account deletion and related personal information removal or anonymization is completed within 15 working days after user request [1]

Core Points - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize personal information collection and usage, protect personal information rights, and promote reasonable use of personal information [1][2] - Internet applications must collect personal information in a manner that minimally impacts the rights of individuals and is limited to what is necessary for providing products or services [1] - Internet applications are required to inform users of personal information collection rules prominently at the first launch and obtain explicit consent from users [1] - Internet applications are prohibited from collecting personal information of individuals other than the user through access to contacts, call logs, and SMS permissions, except when necessary for communication, adding friends, or data backup [1] - Internet applications must obtain separate consent from users before providing personal information to third parties [1] - Users must be provided with an easy option to delete their accounts, and the account deletion must be completed within 15 working days, including the deletion or anonymization of collected personal information [2]

Core Viewpoint - The National Internet Information Office has drafted the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)" to standardize the collection and use of personal information, protect individual rights, and promote reasonable use of personal information [1] Group 1: Regulations on Personal Information Collection - The draft stipulates that the collection and use of personal information should minimize the impact on the rights of individuals and be limited to what is necessary for providing products or services, prohibiting excessive collection [1] - Internet applications must inform users of the rules regarding personal information collection and usage through prominent means, such as pop-ups, at the first launch, and obtain explicit consent from users [1] Group 2: User Rights and Data Handling - Internet applications are prohibited from collecting personal information of individuals other than the user, except when necessary for communication, adding friends, or data backup [1] - If personal information is provided to third parties, explicit consent from the user must be obtained [1] - The draft requires internet applications to offer a convenient account cancellation feature, and upon cancellation, the application must complete the account deletion within 15 working days, either deleting the collected personal information or anonymizing it [1]