Personal data flaws uncovered in nationwide probe

Chinese authorities have uncovered over 12,000 personal data security loopholes across more than 90,000 enterprises and institutions in sectors including education, transport, healthcare and finance, following a nationwide campaign.

The campaign, which began in April, was jointly launched by China's Cyberspace Administration, the Ministry of Industry and Information Technology, and the Ministry of Public Security, together with other departments. The initiative targets persistent privacy violations in mobile applications, software development kits, and online advertisements, aiming to tackle long-standing complaints over personal data misuse.

While addressing personal information issues in the major sectors, the authorities have reviewed the personal data collection and use practices of more than 20,000 apps and SDKs, urging over 4,000 to rectify the problems, according to the Cyberspace Administration. The authorities identified violations in more than 11,000 apps and SDKs, with over 400 removed or otherwise penalized.

The authorities have also tested and ordered rectification of products from more than 1,000 companies and institutions over failures to disclose the use of personal information for advertising and user profiling, as well as the absence of opt-out options for personalized ads, it added.

Additionally, the administration said it has worked with other regulators to intensify the crackdown on violations including data breaches and the illegal resale of personal information, with a particular focus on penalizing industry insiders who facilitate such misconduct.

The authorities noted that they will continue deepening the campaign, with strong education on personal information protection and great efforts to guarantee people's legitimate rights.

caoyin@chinadaily.com.cn