laitimes

The latest reminder, hurry up and uninstall!

author:Ahead plus

National Computer Virus Emergency Response Center

Cybersecurity Law

Personal Information Protection Act

"Collection and Use of Apps in Violation of Laws and Regulations

Methods for Determining Personal Information Behaviors" and other laws and regulations

and related national standards

Recently discovered through Internet monitoring

15 mobile apps had privacy non-compliance

The latest reminder, hurry up and uninstall!

1. The Privacy Policy does not list the purpose, method, and scope of the App's collection and use of personal information one by one; The basic information of the App operator is not declared. The 7 apps involved are as follows:

  • Bohai Baobei (version 3.6.3, App Treasure)
  • Doctor Cretech (version 4.7.4)
  • Fun Movies & TV (version 1.7.2, HUAWEI App Store)
  • "Business Gang Freight" (version 4.0.2, Android bar)
  • Dice Hunter (version 6.2.4, vivo)
  • All-Around Scanner (version 2.1.4, vivo)
  • "Little Golden Music Selection" (version 2.5.5, Tengniu.com)

2. The App client provides personal information to a third party without the user's consent and without anonymization; Where personal information processors provide personal information to other personal information processors that they process, they do not inform the individuals of the recipient's name or name, contact information, purpose of processing, methods of processing, and types of personal information, and do not obtain the individual's separate consent. The 6 apps involved are as follows:

  • "Business Gang Freight" (version 4.0.2, Android bar)
  • "Children's Rhymes for Kids" (version 2.0.00, Xiaomi App Store)
  • Pastoral Ranch (version 1.1.5, oppo)
  • Sea Fitness (version 4.4.1, oppo)
  • Dice Hunter (version 6.2.4, vivo)
  • "Little Golden Music Selection" (version 2.5.5, Tengniu.com)

3. The App begins to collect personal information or opens the permission to collect personal information before obtaining the user's consent. The 2 apps involved are as follows:

  • 《千云司机端》(版本2.4.40,oppo)
  • Sea Fitness (version 4.4.1, oppo)

4. The App does not provide effective functions for correcting or deleting personal information and canceling user accounts, or sets unnecessary or unreasonable conditions for correcting, deleting personal information or canceling user accounts; The channels and methods for providing users with the means to withdraw their consent to the collection of personal information are not specified in the privacy policy and other collection and use rules; The time limit for manual processing (commitment) of the cancellation of the user account exceeds 15 working days. The 5 apps involved are as follows:

  • Fun Movies & TV (version 1.7.2, HUAWEI App Store)
  • "Children's Rhymes for Kids" (version 2.0.00, Xiaomi App Store)
  • 《千云司机端》(版本2.4.40,oppo)
  • 《爱做PPT》(版本1.1,oppo)
  • Sea Fitness (version 4.4.1, oppo)

5. Apps fail to establish and publish channels for personal information security complaints or reports, or fail to accept and handle them within the promised time limit. The 5 apps involved are as follows:

  • "Children's Rhymes for Kids" (version 2.0.00, Xiaomi App Store)
  • Pastoral Ranch (version 1.1.5, oppo)
  • Dice Hunter (version 6.2.4, vivo)
  • "Go Out and Play" (version 1.0.0, vivo)
  • 《千云司机端》(版本2.4.40,oppo)

6. If the processing of personal information is based on the individual's consent, the individual has the right to withdraw his consent. The personal information processor did not provide a convenient way to withdraw consent. The 5 apps involved are as follows:

  • "Children's Rhymes for Kids" (version 2.0.00, Xiaomi App Store)
  • 《千云司机端》(版本2.4.40,oppo)
  • Dice Hunter (version 6.2.4, vivo)
  • All-Around Scanner (version 2.1.4, vivo)
  • Sea Fitness (version 4.4.1, oppo)

7. Pushing information and commercial marketing to individuals through automated decision-making, without providing options that are not targeted at their personal characteristics, or failing to provide individuals with convenient ways to refuse; The privacy policy does not state that the collected personal information of users will be used for targeted push and precision marketing; The privacy policy clearly states that there is a targeted push function, and there is no significant distinction between personalized push services on the page. The 4 apps involved are as follows:

  • "Business Gang Freight" (version 4.0.2, Android bar)
  • "Yue Dian Fingertips Money Version" (version 1.0.3, oppo)
  • 《千云司机端》(版本2.4.40,oppo)
  • Sea Fitness (version 4.4.1, oppo)

8. Processing sensitive personal information without the individual's separate consent. The 4 apps involved are as follows:

  • "Business Gang Freight" (version 4.0.2, Android bar)
  • 《千云司机端》(版本2.4.40,oppo)
  • Dice Hunter (version 6.2.4, vivo)
  • Sea Fitness (version 4.4.1, oppo)

9. Where personal information handlers handle the personal information of minors under the age of 14, they have not formulated special rules for handling personal information; The collection of minors' information does not require the separate consent of the guardian. The 4 apps involved are as follows:

  • Pastoral Ranch (version 1.1.5, oppo)
  • Dice Hunter (version 6.2.4, vivo)
  • 《爱做PPT》(版本1.1,oppo)
  • Sea Fitness (version 4.4.1, oppo)

10. The App does not clearly indicate to the user that it is not with the user's consent, and there is no reasonable use scenario, and there are frequent self-start or associated start-ups. The 1 app involved is as follows:

  • Sino-German Bank (version 1.0.4)

National Computer Virus Emergency Response Center reminds

The majority of mobile phone users should first be cautious about downloading and using the above illegal mobile apps, and at the same time pay attention to carefully reading their user agreements and privacy policy descriptions, do not open and agree to unnecessary privacy permissions at will, do not enter personal privacy information at will, and regularly maintain and clean up relevant data to avoid personal privacy information being leaked. The app testing period listed in the article is from May 1 to June 1, 2024.

Source: National Computer Virus Emergency Response Center CCTV News Client Zhejiang Public Security

Read on