NextFin News — Chinese cybersecurity authorities have cited 35 mobile applications, including nine mini-programs across WeChat and Alipay, for non-compliance with statutory personal information protection rules.
Technical testing conducted by the Ministry of Public Security's computer system security inspection center identified systemic non-compliance across multiple operational vectors. Nine transport and logistics mini-programs, including PineCone Mobility [Songguo Chuxing] and Yuzhou Xing, failed to publish standard disclosures regarding personal data collection and usage rules. Additional infractions included collecting personal data beyond the scope authorized by users, declaring unnecessary system permissions within configuration files, and failing to provide structured listings of operational data collection mechanisms.
Regulatory enforcement across the domestic digital platform economy is expanding beyond standalone mobile applications to target lightweight mini-programs operating within major super-app ecosystems. Chinese oversight agencies are steadily intensifying compliance monitoring across transport, artificial intelligence, and digital service verticals under the legal framework of the Personal Information Protection Law. Compliance risk is consequently rising for ecosystem developers and platform operators, requiring stricter data governance standards to mitigate heightened regulatory scrutiny.
Explore more exclusive insights at nextfin.ai.
