On April 25, Xinhua News Agency reported that the National Computer Virus Emergency Response Center recently found through Internet monitoring that 17 mobile apps such as Dazhi had privacy non-compliance behavior, including 13 mobile apps owned by large, medium, and small brokerage institutions. The named APP has problems such as not explicitly applying to the user for all privacy permissions, and the app began to collect personal information before obtaining the user's consent.
For the origin of the matter and follow-up arrangements and other issues that have attracted much attention, a number of securities institutions involved responded to the "International Finance News" reporter, saying that they attach great importance to this and will carry out corresponding rectification in the follow-up. Some brokers explained that the main problems focused on the lack of clear description of the scene of the cancellation of the account (mobile phone number) in the privacy agreement, and the fact that an application obtained the positioning permission while obtaining the voice permission; some brokers said that the company did not have relevant cooperation with platforms such as Pea Pod and Le Store.
13 brokerage apps were named
According to Xinhua News Agency, the National Computer Virus Emergency Response Center recently found through Internet monitoring that 17 mobile apps have privacy non-compliance behavior, violating the Cybersecurity Law, personal information protection law and other relevant regulations, and suspected of collecting personal privacy information beyond the scope.
First, the user is not explicitly requested for all privacy permissions, suspected of privacy non-compliance. Involving 16 apps: "Yougu Stock Trading" (version 6.6.73, 360 mobile assistant), "Bull Stock King Stock" (version 6.2.7, 360 mobile assistant), "Great Wisdom" (version 9.47, pea pod), "A Niu Zhitou" (version 6.2.7, pea pod);
There are also 12 other brokerage app apps: "GF Easy Gold Rush" (version 10.1.0.0, Baidu mobile assistant), "Western Securities" (version 4.0.3, Huawei App Market), "e Hai Tong Cai" (version 8.75, Le Store), "Guolian Securities Zunbao" (version 6.01.031, Le Store), "China Galaxy Securities" (version 6.0.5, pea pod), "Wanhe Mobile Securities Software" (version 9.00.26, pea pod), "Huitong Qifu" (Version 6.6.4.0, Pea Pod), New Era Securities (version 6.0.1.0, Xiaomi App Store), China Post Securities (version 7.1.2.0, Xiaomi App Store), Zhongshan Securities (version 6.3.3, Xiaomi App Store), East Asia Qianhai Yuesheng (version 4.2.0, Xiaomi App Store), Guoyuan Zhifu (version 8.89, Xiaomi App Store).
Second, the app began to collect personal information before obtaining the user's consent, which was suspected of privacy non-compliance. The 1 app involved is as follows: Caitong Securities (version 9.9.3, Pea Pod).
Second, failure to provide effective functions for correcting or deleting personal information and canceling user accounts, or setting unreasonable conditions for canceling user accounts, is suspected of privacy non-compliance.
There are 9 apps involved, all of which are securities institution APP, all of which also have the problem of all the privacy permissions that have not been explicitly applied to the user in the first article above: "GF Easy Gold Rush" (version 10.1.0.0, Baidu Mobile Assistant), "Western Securities" (version 4.0.3, Huawei Application Market), "eHai Tongcai" (version 8.75, Le Store), "Guolian Securities Zunbao" (version 6.01.031, Le Store), "Wanhe Mobile Securities Software" (Version 9.00.26, Pea Pod), Huitong Qifu (Version 6.6.4.0, Pea Pod), New Era Securities (Version 6.0.1.0, Xiaomi App Store), China Post Securities (Version 7.1.2.0, Xiaomi App Store), East Asia Qianhai Yue Rise (Version 4.2.0, Xiaomi App Store).
Fourth, failure to establish or publish channels for personal information security complaints and reports, or exceeding the promised time limit for handling responses, is suspected of privacy non-compliance. The 1 app involved is as follows: China Post Securities (version 7.1.2.0, Xiaomi App Store).
In view of the above situation, the National Computer Virus Emergency Treatment Center reminds that the majority of mobile phone users should first carefully download and use the above illegal and illegal mobile Apps, and at the same time pay attention to carefully reading their user agreements and privacy policy descriptions, not arbitrarily opening and agreeing to unnecessary privacy permissions, not entering personal privacy information at will, regularly maintaining and cleaning relevant data, and avoiding personal privacy information being leaked.
The broker involved responded urgently
For the reasons behind the relevant situation, as well as follow-up solutions, several brokerage institutions responded to the "International Finance News" reporter, and many institutions said that the company did not cooperate with pea pods and other related platforms, and will be improved accordingly in the later stage.
"In response to the warning problems of the National Computer Virus Emergency Treatment Center, we attach great importance to it and implement the list of confirmed problems at the first time." The main problems focus on the problems such as the unclear description of the scene of account cancellation (mobile phone number cancellation) in the privacy agreement, and the location permission obtained by an application while obtaining voice permissions. Western Securities told the "International Finance News" reporter that at present, the Western Securities Network Finance Department, compliance department and legal department are actively rectifying, and it is planned to send the rectified Xintianyou installation package, revised privacy agreement and rectification instructions to the National Computer Virus Emergency Treatment Center on April 25, 2022. Upload updates in major app stores as soon as possible after the test is passed.
Caitong Securities responded to the "International Finance News" reporter, "In response to the Exposure of caitong securities APP Android version 9.9.3, it has been confirmed that the pea pod platform has not cooperated with the company, the company has not uploaded a client version on the platform, this version has not been confirmed by Caitong Securities, please download the latest official version through the company's official website, Huawei, xiaomi, app treasure, Apple and other markets." ”
Among them, the named "Huitong Qifu" (version 6.6.4.0, Pea Pod) is a mobile APP owned by Shanxi Securities. Shanxi Securities also responded to the "International Finance News" reporter, "It has been confirmed that the pea pod platform has not cooperated with the company, and the company has not uploaded a client version on the platform." In the follow-up, our company will continue to maintain communication with relevant departments, and further improve the work under the guidance of relevant departments to provide users with a better experience. ”
"Our company is highly concerned about this, the first time to organize relevant business and technical personnel to carry out self-examination, and contact the National Mobile Internet Application Security Management Center to understand the specific situation, is still in the process of communication and understanding." Guolian Securities responded to the "International Finance News" reporter, "In response to the 6.01.031 version of the Zunbao APP 'Le Store' mentioned here, it has been confirmed that the 'Le Shop' platform has not cooperated with our company, and our company has not released it on the platform, and this version has not been confirmed by our company." In the follow-up, our company will continue to maintain communication with relevant departments, and further improve the work under the guidance of relevant departments to provide users with a better experience. ”
Guolian Securities further stated that as a licensed securities operating institution, Guolian Securities provides investors with investment and financial services through the Guolian Zunbao APP under the premise of complying with national laws and regulations, user privacy policies and user authorization agreements. In particular, since the promulgation of the Personal Information Protection Law in 2021, Guolian Securities has strictly followed the requirements of laws and regulations to display the "Guolian Securities Internet Platform User Agreement", "Guolian Securities Internet Platform Privacy Policy", "Guolian Securities Internet Platform Exemption Policy" and other agreement documents to users when launching the application, clearly revealing to users the scope and purpose of the collected data.
This article originated from the evidence-based storm