Source: Cyber ​​Security Bureau of the Ministry of Public Security In order to strengthen the crackdown on illegal activities that infringe on citizens’ personal information, eradicate the breeding ground for cyber crimes, and comprehensively enhance people’s sense of online secu

Source: Internet Security Bureau of the Ministry of Public Security

In order to strengthen the crackdown on illegal activities that infringe on citizens’ personal information, eradicate the breeding ground for cyber crimes , and comprehensively enhance the people’s online sense of security, gain, and happiness, Guangxi Guilin Public Security Bureau Network The security detachment carried out special operations to crack down on illegal acts of "public infringement" and severely investigated and dealt with illegal acts of network operators who failed to fulfill their network security protection obligations.

E-commerce shopping APP example

In March this year, when the network security department went to a Guangxi Industrial Group Co., Ltd. to conduct a network security inspection, it was discovered that the company used a "certain premium APP" to provide users with shopping discount information.

This APP obtained 8 permissions such as mobile phone precise positioning, storage space, phone, camera, and microphone without explicitly informing the user, and collected relevant user information.

The police discovered by retrieving the interaction data between the APP client and the server that the APP had collected more than 20,000 people's ID card information, mobile phone numbers, IMEI numbers and other personal information without explicitly informing the users, and the above data had not been After encrypted storage processing.

The network security department issued an administrative penalty of warning in accordance with the " Cyber ​​Security Law of the People's Republic of China" and ordered it to make rectifications within a time limit.

APP development company example

In April this year, the network security department went to a certain network Co., Ltd. in Guilin to conduct a network security inspection and found that:

The company developed an APP for a certain unit in Lipu City without the consent of the user. In this case, they obtained 7 permissions such as mobile phone precise positioning, storage space, phone, camera, address book, etc., and collected more than 40,000 user registration information, and the data was not encrypted and stored.

In view of the illegal behavior of the Internet company in collecting citizens’ personal information beyond the scope and failing to perform network security obligations, the network security department issued a warning and administrative penalty to it in accordance with the "Cybersecurity Law of the People's Republic of China" and ordered it to make rectifications within a time limit.

Example of a wedding celebration APP

In April this year, the network security department went to a network technology company in Guilin to conduct a network security inspection and found:

A wedding APP developed and used by the company collected more than 130,000 user registration information and stored users There are more than 50,000 pieces of vehicle registration information and driver information, and the data has not been encrypted and stored. The company has not implemented network security responsibilities, has not identified the person in charge of network security, has not implemented a network security level protection system, and has not adopted relevant network security protection technologies. measure.

In view of the illegal behavior of the Internet company in collecting citizens' personal information beyond the scope and failing to perform network security obligations, the network security department issued a warning and administrative penalty to it in accordance with the "Cybersecurity Law of the People's Republic of China" and ordered it to make rectifications within a time limit.

Leisure and entertainment APP example

In April this year, the network security department went to a Guilin Internet Technology Co., Ltd. to conduct a network security inspection and found:

An audio-visual APP developed and used by the company obtained the location of the mobile phone without the user's consent. 8 permissions including information, storage space, recording, phone, camera, microphone, etc. The APP stores more than 30,000 user mobile phone number information in the background, and the data is not encrypted and stored. The company has not implemented network security responsibilities and has not clearly defined the network The person in charge of security failed to implement the network security level protection system and failed to adopt relevant network security protection technical measures.

In view of the illegal behavior of the Internet company in collecting citizens' personal information beyond the scope and failing to perform network security obligations, the network security department issued a warning and administrative penalty to it in accordance with the "Cybersecurity Law of the People's Republic of China" and ordered it to make rectifications within a time limit.

Internet police remind

that the collection, use, and storage of citizens' personal information must comply with the " Cyber ​​Security Law " and other relevant laws and regulations.

Violation of relevant regulations will be subject to administrative penalties such as warnings, confiscation of illegal gains, fines, etc. In serious cases, penalties such as suspension of relevant business, suspension of business for rectification, website closure, revocation of license or business license, etc.

Citizens’ personal information is protected by law. Any illegal and criminal behavior that infringes upon citizens’ personal information will be punished by law.

Relevant units must strengthen internal personnel management to prevent citizen information from being leaked from within, and at the same time strengthen network security protection to prevent information leakage caused by hacker intrusions!

The public security organs will continue to vigorously strengthen the governance of the network ecology, crack down on and deter illegal acts of "public infringement", and make every effort to maintain the security of cyberspace.

pictures | Internet screenshots

materials | Guangxi Internet Police

editor | Ma Minghao/Zhu Tianle