注册    登录
关注
Py学习  »  Git

Digital Economy and Data Protection Newsletter（25.22）

TMT法律论坛 • 1 月前 • 61 次点击  

Click above｜Follow us


Recently, in terms of legislation, the Measures for the Protection of Personal Information of Large-Scale Internet Platforms (Draft for Comment) and the Measures for the Administration of Network Security Identification (Draft for Comment) have been issued, focusing on end-to-end compliance of large-scale internet platforms and unified identification management for the cybersecurity capabilities of network products. The MPS has formulated the Measures for Cyberspace Security Supervision and Inspection by Public Security Organs (Draft for Comment) to improve law enforcement rules. The TC260 has issued draft practice guidelines focusing on personal information identification, de-identification, and anonymization. In terms of law enforcement, the CAC has released the results of centralized investigation and punishment of illegal and irregular labeling of AI-generated content. Overseas, the EU has put forward a digital omnibus legislative proposal to simplify existing rules on artificial intelligence, cybersecurity, and data protection; the White House has issued an executive order to accelerate AI technological breakthroughs; and Apple’s ATT framework is facing anti-monopoly allegations in Poland, among other developments.


HOTSPOT

HOTSPOT



CAC and MPS Issue the Measures for the Protection of Personal Information of Large-Scale Internet Platforms (Draft for Comment)


On November 22, 2025, the Cyberspace Administration of China (CAC) and the Ministry of Public Security (MPS) jointly issued the Measures for the Protection of Personal Information of Large-Scale Internet Platforms (Draft for Comment) (hereinafter referred to as the "Measures"), soliciting public opinions with the deadline for feedback on December 22, 2025. Focusing on "large-scale internet platforms" (a category of personal information processors specified in the Regulations on the Administration of Network Data Security), the Measures propose to implement directory management for such platforms, set higher requirements for their personal information processing activities and protection work, especially strengthen external supervision and social oversight, and emphasize establishing an end-to-end compliance chain covering personnel, institutions, and storage facilities.


For more information, please click here.

Source: CAC 





TC260 Solicits Public Opinions on 3 Network Security Standard Practice Guidelines Including Personal Information Identification, De-identification, and Anonymization


On November 24, 2025, the National Information Security Standardization Technical Committee (TC260) solicited public opinions on 3 network security standard practice guidelines, including personal information identification, de-identification, and anonymization, with the deadline for feedback on December 7, 2025.

Among them, the Guidelines for Personal Information Identification (Draft for Comment) identifies personal information through four elements: "various types of information", "relevant to", "identified or identifiable", and "natural person", explains and gives examples of each element, and emphasizes that personal information identification shall be combined with specific contexts and specific scenario facts. The Guidelines for Personal Information De-identification (Draft for Comment) clarifies two main technical paths for de-identification: desensitization and pseudonymization, provides the implementation framework, process steps, and safety guarantee measures for pseudonymization, and offers identifier identification rules and examples, de-identification reference cases, and desensitization examples of common types of personal information. The Guidelines for Personal Information Anonymization (Draft for Comment) provides the judgment rules, implementation methods, application scenarios of anonymization, as well as personal information anonymization reference cases and technologies involved in anonymization processing, etc.


For more information, please click here.

Source: TC260





SAMR Solicits Public Opinions on the Guidelines for Anti-monopoly Compliance of Internet Platforms (Draft for Comment)


On November 15, 2025, to support and guide platform operators in effectively preventing anti-monopoly compliance risks, improving anti-monopoly compliance management mechanisms, protecting the legitimate rights and interests of relevant entities, maintaining a fair market competition order, and promoting the healthy development of the platform economy, the State Administration for Market Regulation (SAMR) issued the Guidelines for Anti-monopoly Compliance of Internet Platforms (Draft for Comment) (hereinafter referred to as the "Guidelines") and solicited public opinions.

In recent years, China’s platform economy has developed rapidly, with new formats and business models emerging continuously, and competition behaviors becoming increasingly complex. The Guidelines provide detailed rules for platform operators to identify monopoly risks and clarify behavioral boundaries, supporting and guiding them to accurately identify, evaluate, and prevent monopoly risks. It also systematically sorts out the types of monopoly behaviors in internet platform operations and offers compliance suggestions for key risk management and compliance assurance mechanisms.


Source: SAMR

https://www.samr.gov.cn/hd/zjdc/art/2025/art_8e05960782204036af6b9583f1413378.html






NEWSLETTER

NEWSLETTER


（Click on the source or copy the corresponding link to view the details）




LEGISLATION

  1. CAC and MPS Issue the Measures for the Protection of Personal Information of Large-Scale Internet Platforms (Draft for Comment)

    Source: CAC


  2. MPS Issues the Measures for Cyberspace Security Supervision and Inspection by Public Security Organs (Draft for Comment)

    Source: MPS

    https://www.mps.gov.cn/n2254536/n4904355/c10316016/content.html


  3. CAC Issues the Measures for the Administration of Network Security Identification (Draft for Comment)

    Source: CAC


  4. SAMR Solicits Public Opinions on the Guidelines for Anti-monopoly Compliance of Internet Platforms (Draft for Comment)

    Source: SAMR

    https://www.samr.gov.cn/hd/zjdc/art/2025/art_8e05960782204036af6b9583f1413378.html


  5. SAMR Solicits Public Opinions on the Measures for E-commerce Platforms to Assist in Investigating and Handling Trademark Infringement Cases (Draft for Comment)

    Source: SAMR

    https://www.samr.gov.cn/hd/zjdc/art/2025/art_0d4a120758a7437e8a0b69b6016c5fbb.html?sessionid=-1872927072


  6. TC260 Solicits Public Opinions on 3 Network Security Standard Practice Guidelines (Personal Information Identification, De-identification, Anonymization)

    Source: TC260


  7. Multiple Departments in Shanghai Issue the Guidelines for Network Data Security and Personal Information Protection Compliance of Internet Enterprises Engaged in Medical Services in Shanghai

    Source: Shanghai Cyberspace Administration


  8. Hunan Cyberspace Administration Solicits Public Opinions on the Benchmarks for the Discretionary Power of Cyberspace Administrative Penalties in Hunan Province (Draft for Comment)

    Source: Hunan Cyberspace Administration


  9. General Technical Requirements for Customer Service-Type Virtual Digital Humans (GB/T 46483-2025) Officially Released

    Source: Shanghai Cyberspace Administration



INDUSTRY TRENDS

  1. CAC Releases the Results of Centralized Investigation and Punishment of Apps with Illegal and Irregular Content Labeling

    Source: CAC


  2. Supreme People's Court (SPC) Releases Typical Cases of Governing Malicious Intellectual Property Litigation

    Source: SPC


  3. Supreme People's Court (SPC) Releases Typical Cases of Network Protection of Minors and Punishment of Illegal and Criminal Acts

    Source: SPC


  4. National Data Administration (NDA): Launch of the First Batch of 12 Pilot Projects for the Development and Utilization of Data Resources by State-owned Enterprises

    Source: NDA


  5. Public Security Ministry's Computer Information System Security Product Quality Supervision and Inspection Center Notifies 40 Mobile Applications

    Source: Cyberspace Security Bureau of the MPS


  6. Guangdong Cyberspace Administration Issues the Guidelines for the Filing of Standard Contracts for Cross-border Flow of Personal Information in the Guangdong-Hong Kong-Macao Greater Bay Area, Shifting Standard Contract Filing Online

    Source: Guangdong Cyberspace Administration


  7. Shanghai Higher People's Court Releases a Contract Fraud Case of "Freeloading Traffic" Through Exploiting Advertising Platform Settlement Vulnerabilities

    Source: Shanghai Higher People's Court


  8. Shanghai Cyberspace Administration Issues the Announcement on the Registration Information of Generative Artificial Intelligence Services in Shanghai (November 19)

    Source: Shanghai Cyberspace Administration


  9. Shanghai Cyberspace Administration Releases Ten Typical Disposal Cases of Optimizing the Business Network Environment

    Source: Shanghai Cyberspace Administration


  10. Shanghai Cyberspace Administration Releases the Long-term Governance Results of the Application of "Facial Recognition" Technology

    Source: Shanghai Cyberspace Administration


  11. Shanghai Cyberspace Administration Carries Out Special Law Enforcement on "AI Abuse", Taking 54 Apps Illegally Using Gen AI Technology Off the Shelf 

    Source: Shanghai Cyberspace Administration


  12. Shanghai Communications Administration Issues the Notice on Apps (SDKs) Infringing on Users' Rights and Interests (10th Batch in 2025)

    Source: Shanghai Communications Administration


  13. Shanghai Communications Administration Issues the Notice on Apps (SDKs) Infringing on Users' Rights and Interests (10th Batch in 2025)

    Source: Shanghai Communications Administration


  14. Shandong Higher People's Court Releases a Contract Dispute Case Between a Trading Company and a Technology Company Arising from the Suspension of an AI Digital Human Anchor by the Platform

    Source: Shandong Higher People's Court


  15. Guangzhou Intermediate People's Court Concludes the First Case in Guangdong Province Arising from the Disclosure of Personal Information in Carbon Quota Transactions

    Source: Guangzhou Intermediate People's Court


  16. Two Entities Punished by Public Security Organs for Failing to Complete the Level Protection Evaluation

    Source: Tongren Public Security Bureau


  17. Xiangxi Prefecture Cyberspace Administration Imposes an Administrative Penalty on a School for Failing to Fulfill Data Security Protection Obligations

    Source: Hunan Cyberspace Administration


  18. Gansu Communications Administration Issues the Notice on Disposing of Apps and Mini Programs Infringing on Users' Rights and Interests (6th Batch in 2025)

    Source: Gansu Communications Administration


  19. Shaanxi Cyberspace Police Legally Investigate a Case of Data Leakage Caused by an Attack on a Drone Management Platform

    Source: Cyberspace Security Bureau of the MPS


  20. Changsha Cyberspace Administration Releases Typical Law Enforcement Cases Related to Personal Information Protection

    Source: Changsha Cyberspace Administration



OVERSEAS

  1. EU:

    1. Court of Justice of the European Union (CJEU) Dismisses Amazon's Lawsuit Against Its Designation as a VLOP Under the DSA

      Source: CJEU

      https://curia.europa.eu/jcms/upload/docs/application/pdf/2025-11/cp250144en.pdf


    2. European Commission (EC) Issues a Digital Omnibus Legislative Proposal to Simplify Existing Rules on AI, Cybersecurity, and Data

      Source: European Commission

      https://commission.europa.eu/news-and-media/news/simpler-digital-rules-help-eu-businesses-grow-2025-11-19_en


    3. EC Releases the 2030 Consumer Agenda

      Source: EC

      https://commission.europa.eu/news-and-media/news/2030-consumer-agenda-strengthening-consumer-protection-competitiveness-and-sustainable-growth-2025-11-19_en


    4. EC Releases a Digital Omnibus on AI Regulation Proposals

      Source: EC

      https://digital-strategy.ec.europa.eu/en/library/digital-omnibus-ai-regulation-proposal


    5. EC Launches Market Investigations into Cloud Computing Services Under the DMA

      Source: EC

      https://digital-markets-act.ec.europa.eu/commission-launches-market-investigations-cloud-computing-services-under-digital-markets-act-2025-11-18_en


    6. EC Releases a Report on the Application of Article 33 of the DSA and Its Interaction with Other Legal Acts

      Source: EC

      https://digital-strategy.ec.europa.eu/en/library/report-application-article-33-regulation-eu-20222065-dsa-and-interaction-regulation-other-legal


    7. Council of the European Union Adopts Rules for Speeding Up the Handling of Cross-border Data Protection Complaints

      Source: Council of the European Union

      https://www.consilium.europa.eu/en/press/press-releases/2025/11/17/council-adopts-new-eu-law-to-speed-up-handling-cross-border-data-protection-complaints/


    8. EC Evaluates the Interaction of the DSA with Other EU Laws and Its Designation Thresholds for VLOPs and VLOSEs

      Source: EC

      https://digital-strategy.ec.europa.eu/en/news/commission-evaluates-digital-services-acts-interaction-other-eu-laws-and-its-designation-threshold


    9. EDPB Organizes a Stakeholder Event on Anonymization and Pseudonymization

      Source: EDPB

      https://www.edpb.europa.eu/news/news/2025/stakeholder-event-anonymisation-and-pseudonymisation-express-your-interest_en


    10. European Supervisory Authorities Announce the List of Critical ICT Third-Party Providers Designated Under the DORA

      Source: EIOPA

      https://www.eiopa.europa.eu/european-supervisory-authorities-designate-critical-ict-third-party-providers-under-digital-2025-11-18_en#:~:text=The%20European%20Supervisory%20Authorities%20%28EBA%2C%20EIOPA%2C%20and%20ESMA,in%20the%20implementation%20of%20the%20DORA%20oversight%20framework


    11. CJEU Rules That Sending Newsletters Promoting Paid Services to Free Users Constitutes Direct Marketing

      Source: CJEU

      https://curia.europa.eu/juris/document/document.jsf?text=&docid=306136&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=4667790


    12. EC Launches a Whistleblower Tool for the AI Act

      Source: EC

      https://digital-strategy.ec.europa.eu/en/news/commission-launches-whistleblower-tool-ai-act#:~:text=The%20European%20Commission%20today%20launched%20a%20whistleblower%20tool,the%20centre%20of%20AI%20expertise%20within%20the%20Commission


    13. EC Requests Shein to Provide Information on the Sale of Illegal Products Under the DSA

      Source: EC

      https://digital-strategy.ec.europa.eu/en/news/commission-requests-shein-provide-information-sale-illegal-products-under-digital-services-act


  2. United States (US):

    1. White House Launches the Genesis Mission to Build an Integrated AI Platform and Accelerate AI Technological Breakthroughs

      Source: The White House

      https://www.whitehouse.gov/presidential-actions/2025/11/launching-the-genesis-mission/#:~:text=The%20Genesis%20Mission%20will%20build%20an%20integrated%20AI,hypotheses%2C%20automate%20research%20workflows%2C%20and%20accelerate%20scientific%20breakthroughs


    2. California Attorney General (AG) Reaches a $1.4 Million Settlement with JamCity Over Its Failure to Provide an Opt-out Option in Gaming Apps

      Source: California Attorney General (AG)

      https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-14-million-settlement-mobile-app-gaming-company?print=true


    3. CalPrivacy Releases an Infographic on What to Know Before the 2026 CCPA Updates Take Effect

      Source: CalPrivacy

      https://cppa.ca.gov/pdf/things_to_know_before_2026_updates.pdf


    4. Senate Introduces the Algorithmic Accountability Act

      Source: Senate Member's Website

      https://www.curtis.senate.gov/wp-content/uploads/2025/11/Bill-Text.pdf


    5. Suno Reaches a Lawsuit Settlement with Warner Music Group (WMG) to Establish a Partnership for Music Model Development

      Source: Suno

      https://suno.com/blog/wmg-partnership


    6. US Supreme Court Rules That Meta's Acquisitions of Instagram and WhatsApp Did Not Violate Anti-monopoly Laws

      Source: CNN

      https://edition.cnn.com/2025/11/18/tech/meta-antitrust-suit-decision-not-monopoly


    7. Logitech Confirms to the US Securities and Exchange Commission (SEC) That It Suffered a Cyber Attack Leading to Data Leakage, with No Sensitive Information Involved

      Source: National Engineering Research Center for Information Security

      https://mp.weixin.qq.com/s/KJYAEbX3Ne3XlXxbCJ3f1A


    8. DJI Issues a Statement Entitled "What’s Going On with DJI in the U.S.?" in Response to the Provision in the US National Defense Authorization Act (NDAA) for Fiscal Year 2025 Requiring National Security Agencies to Conduct Security Audits on Chinese Drone Manufacturers

      Source: DJI Official Website

      https://viewpoints.dji.com/blog/whats-going-on-with-dji-in-the-u.s


  3. Spain:

    1. Meta Ordered to Pay a €479 Million Fine by Madrid Court for Violating GDPR Through Illegal Use of Personal Data for Advertising

      Source: RTE

      https://www.rte.ie/news/business/2025/1120/1544971-spain-orders-meta-to-pay-479m-to-digital-media-firms/


    2. Spanish Data Protection Agency (AEPD) Releases an Encryption Guide for Freelancers and Small and Medium-sized Enterprises (SMEs)

      Source: AEPD

      https://www.aepd.es/prensa-y-comunicacion/notas-de-prensa/la-agencia-publica-guia-ayudar-a-autonomos-y-pymes


    3. Prime Minister Announces an Investigation into Meta Over Alleged Mass Privacy Breaches

      Source: EuroWeekly News

      https://euroweeklynews.com/2025/11/19/spain-launches-investigation-into-meta-over-alleged-mass-privacy-breach/


    4. AEPD Fines Aena Airports €10 Million Over Facial Recognition Issues

      Source: EuroWeekly News

      https://euroweeklynews.com/2025/11/26/aena-hit-with-e10-million-fine-over-airport-facial-recognition/


  4. Turkey: KVKK Releases Guidelines on Generative AI and Personal Data Protection

    Source: KVKK

    https://www.kvkk.gov.tr/SharedFolderServer/CMSFiles/MTY5MjNmNmIwZWY3YTE.pdf


  5. Netherlands: A Wind Turbine Technical Manager Convicted of Stealing Electricity and Computer Intrusion (Illegal Access to Routers and Servers) for Deploying Cryptocurrency Mining Machines and Helium Nodes in the Company's Internal Industrial Network

    Source: SecRSS

    https://www.secrss.com/articles/85159


  6. Denmark: Datatilsynet Releases Guidelines on the Provision of Employee Data by Suppliers to Purchasers for Compliance Purposes

    Source: Datatilsynet

    https://www.datatilsynet.dk/presse-og-nyheder/nyhedsarkiv/2025/nov/videregivelse-af-personoplysninger-som-dokumentation-for-overholdelse-af-arbejdsklausuler#:~:text=Datatilsynet%20har%20udarbejdet%20en%20vejledende%20udtalelse%20om%20leverand%C3%B8rers,som%20dokumentation%20for%20overholdelse%20af%20arbejdsklausuler%20i%20kontrakten


  7. Poland: Office of Competition and Consumer Protection (UOKIK) Officially Files an Anti-monopoly Lawsuit Against Three Apple Entities, Accusing Them of Abusing Dominant Market Position Through the ATT Framework

    Source: UOKIK

    https://uokik.gov.pl/czy-apple-ogranicza-konkurencje-prezes-uokik-stawia-zarzuty


  8. Germany: Bundestag Adopts the Law Implementing the NIS2 Directive

    Source: BSI

    https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2025/251113_NIS-2-Umsetzungsgesetz.html


  9. India: Data Security Council of India (DSCI) Releases a Summary of Data Protection Rules

    Source: DSCI

    https://www.dsci.in/resource/content/insight-brief-digital-personal-data-protection-rules-2025


  10. France: CNIL Releases Its 10th Innovation and Foresight Report - "Data After Us", Exploring the Issue of Digital Death

    Source: CNIL

    https://www.cnil.fr/en/cnil-publishes-10th-innovation-and-foresight-report


  11. Ireland: Irish High Court Continues the Stay on the Decision That TikTok Should Stop Transferring Data to China

    Source: Irishtimes

    https://www.irishtimes.com/business/2025/11/17/high-court-continues-stay-on-decision-tiktok-should-stop-transferring-data-to-china/


  12. Japan: CloudFlare Ordered to Compensate Copyright Owners 500 Million Yen for Constituting Contributory Infringement by Providing CDN Services to Pirate Websites; Repeated Automatic Transmission Through CDN Caching Does Not Constitute Pure "Incidental Use", Clarifying the Liability Boundaries of CDN Service Providers in Copyright Protection

    Source: Tokyo District Court

    https://www.courts.go.jp/assets/hanrei/hanrei-pdf-95079.pdf


  13. Thailand: Digital Economy and Society Ministry (DES) and Personal Data Protection Commission (PDPC) Suspend the Iris Scan Encryption Token Scheme and Order the Deletion of 1.2 Million Biometric Records Violating the Personal Data Protection Act (PDPA)

    Source: National Thailand

    https://www.nationthailand.com/news/general/40058731



Note

本文由Gen AI翻译，仅供参考。

Translated by Gen AI service. For reference only.


本期编辑：吴佳蔚 陈煜烺 陈瑞庭 陈曦宇 张丽

Python社区是高质量的Python/Django开发社区
本文地址：http://www.python88.com/topic/189886
登录后回复
关于   移动版
Py学习 - 专注于Python技术发展的社区(原Django社区)
沪ICP备11025650号