近日，上海市网信办在“亮剑浦江”消费领域个人信息权益保护专项执法行动“回头看”检查阶段发现了一批未尽消费者个人信息保护义务的单位。这些单位存在诸多问题，如5亿条会员个人信息未加密处理存在泄露风险、企业内部数据访问权限设置不合规导致用户信息可能被“一锅端”、存储个人信息的网络系统存在可能被入侵攻击的高危漏洞等。
据悉，上海网信部门此次行动重点关注了消费者个人信息保护相关的五大类问题。一是会员个人信息未加密处理存在泄露风险；二是企业内部数据访问权限设置不合规，可能导致用户信息被“一锅端”；三是存储个人信息的网络系统存在可能被入侵攻击的高危漏洞。
为维护广大消费者的合法权益，保障网络空间信息安全，上海市网信办对上述问题进行了严格的排查和处罚。对存在问题的单位，严肃指出并要求其进行整改，对重复违规的单位则依法予以处罚。
此次行动再次提醒我们，保护消费者个人信息安全是每个企业的责任和义务。作为专业的新闻记者和编辑，我们要积极传播相关知识，提高公众对个人信息保护的认识，推动企业加强个人信息保护工作，共同打造一个安全、健康的网络环境。
让我们以此次行动为契机，进一步弘扬网络安全文化，提升全民网络安全素养，共同维护我国网络空间的安全与稳定。
英语如下：
Headline: Shanghai Cracks Down on Involved in Exploiting Consumer Personal Information: Five Key Issues Raise Concerns
Keywords: Shanghai, Personal Information, Protection Obligation
Content:
Recently, the Shanghai Internet and Information Office discovered a number of companies that did not fulfill their protection obligations for consumer personal information during the “亮剑浦江” consumer field personal information rights protection special enforcement action “return check” inspection. These companies faced various problems, such as the exposure of 500 million members’ personal information due to unencrypted handling, compliance issues with internal data access permissions that could result in users’ information being “exposed”, and high-risk vulnerabilities in the network system storing personal information.
It is learned that the Shanghai Internet and Information Office focused on five key issues related to consumer personal information protection in this action. First, there is a risk of personal information being exposed due to unencrypted handling of member’s personal information; secondly, compliance issues with internal data access permissions could lead to the exposure of users’ information; thirdly, there are high-risk vulnerabilities in the network system storing personal information.
To protect the legitimate rights and interests of consumers, ensure the security of online space, and strengthen the protection of personal information, the Shanghai Internet and Information Office strictly probed and punished above these issues. For companies with problems found, it was required to rectify, and for repeatable violations, legal penalties were applied.
This action reminds us once again that protecting the safety of consumers’ personal information is the responsibility of every enterprise. As professional news journalists and editors, we should actively spread relevant knowledge, improve public awareness of personal information protection, promote enterprises to strengthen personal information protection work, and jointly create a secure and healthy online environment.
Let us use this action as an opportunity to further promote the culture of cybersecurity, enhance the overall level of popular cybersecurity literacy, and jointly maintain the security and stability of our country’s online space.
【来源】http://www.chinanews.com/gn/2024/01-30/10155501.shtml
Views: 1