The Ministry of Industry and Information Technology will issue "22 regulations": APP rights requests should be based on the principle of minimum necessity

Mobile phone apps unscrupulously collect personal information beyond the scope of the law. The Ministry of Industry and Information Technology has repeatedly taken action to rectify the situation, and even resorted to the punishment of removing apps from shelves. The situation has improved greatly at present.

In order to more thoroughly eradicate the phenomena of forced authorization, excessive rights requests, and collection of personal information beyond the scope of apps, the Ministry of Industry and Information Technology is about to issue the "Interim Provisions on the Protection and Management of Personal Information of Mobile Internet Applications."

It is understood that the "Interim Provisions" have a total of 22 articles. Based on the two basic principles of personal information protection, namely, informed consent and minimum necessary , it requires that those engaged in App personal information processing activities should inform users of the personal information processing rules in clear and understandable language, and users should make voluntary and clear expressions of intent under the premise of full support.

The regulations also require that apps that process personal information must have clear and reasonable controls and follow the principle of minimum necessity, and must not engage in personal information processing activities that exceed the scope of user consent or are irrelevant to the service scenario.

The "Interim Provisions" focus on regulating App developers and operators, App distribution platforms, App third-party service providers, mobile terminal telecommunications equipment manufacturers, and network technology service providers, and stipulate the overall requirements for personal information protection that the five categories of entities should follow and the obligations they should assume.

If relevant entities violate the regulations, they will be dealt with in accordance with the notification, including rectification, public notification, removal from shelves, and disconnection of access processes.

If rectification is not completed as required or problems recur, or if technical confrontation is adopted and the violations are serious, in addition to direct removal from the shelves and disconnection of access, the App distribution platform and terminal telecommunications equipment manufacturers will also be advised to provide risk warnings in the integration, distribution, pre-installation and installation links.