企业APP个人信息安全保护合规风险及保护体系实践

2021年6月底我国手机网民规模超10亿,手机APP数量约300万款,APP已经成为各类业务发展的重要入口,直接或间接接触海量用户个人敏感信息。同时,近年来APP违法违规采集、使用、储存个人信息的问题愈发严峻,已对个人用户和社会公共利益造成威胁,引发公众广泛关注。本文通过梳理APP个人信息保护现状、结合监管要求,创新构建了一种企业自有APP用户个人信息安全保护体系,体系包括多维安全检测内容、多端智能检测模式、多级能力输出、主动威胁预警四个模块,为企业APP健康发展注智赋能,为用户个人信息安全保驾护航。

Private Information Security Protection Risk and Protection System Practice

At the end of June 2021, the scale of China"s mobile internet users exceeded 1 billion, and the number of mobile phone APPs is about 3 million. APPs have become the major entrances for the development of various businesses, directly or indirectly contacting massive amounts of users" sensitive information. At the same time, the problem of illegal collection, use and storage of private information by APPs has become more and more serious in recent years, which has posed a threat to individual users and the public interest of the society and aroused widespread public concern. In this paper, through sorting out the current situation of APPs private information protection and combining with the regulatory requirements, we innovatively build an private information security protection system of APPs for our enterprise, which includes four modules of multi-dimensional security detection content, multi-terminal intelligent detection mode, multi-level capability output and active threat warning, so as to inject intelligence and empower the stable development of enterprise APPs and protect the private information security of users.