The Cyberspace Administration of China (CAC) has drafted new regulations prohibiting applications (APPs) from accessing camera and microphone permissions in unrelated scenarios.
According to a report by China News Service, on Saturday (January 10), the CAC sought public comment on the "Regulations on the Collection and Use of Personal Information by Internet Applications (Draft for Comments)".
The draft for comments stipulates that internet applications may only access camera or microphone permissions when users actively choose to use functions such as taking photos, sending voice messages, or recording audio and video. They are prohibited from accessing camera or microphone permissions when the user has stopped using related functions or in unrelated scenarios.
The new regulation aims to standardize the collection and use of personal information by internet applications, protect personal information rights and interests, and promote the reasonable use of personal information. The draft specifies that the collection and use of personal information should be carried out in a way that minimizes the impact on the rights and interests of the individual, and should be limited to what is necessary for providing products or services, without collecting or using personal information beyond this scope.
The new regulation aims to standardize the collection and use of personal information by internet applications, protect personal information rights and interests, and promote the reasonable use of personal information. The draft specifies that the collection and use of personal information should be carried out in a way that minimizes the impact on the rights and interests of the individual, and should be limited to what is necessary for providing products or services, without collecting or using personal information beyond this scope.
The draft also notes that internet applications, upon first launch, should use pop-up windows or other prominent methods to inform users about rules regarding the collection and use of personal information and obtain explicit consent from users after they are fully informed.
According to the draft, internet applications must not collect or use personal information of individuals other than the user via access to contacts, call logs, or SMS permissions, except where necessary to fulfill communication, add contacts, or data backup. When providing personal information to third parties, internet applications must obtain separate consent from the user.
According to the draft, internet applications should provide users with convenient ways to delete their accounts. When a user deletes their account, the application must complete the account deletion and erase or anonymize any collected personal information within 15 working days.
According to the draft, internet applications should provide users with convenient ways to delete their accounts. When a user deletes their account, the application must complete the account deletion and erase or anonymize any collected personal information within 15 working days.
The deadline for public feedback is February 9.