The first case in Guangdong! A company in Guangzhou was punished by the police for failing to fulfill its obligation of data security protection

Ocean net news 7 month 26 Japan , The Information Office of Guangzhou Public Security Bureau held a press conference , notification 2022 Guangzhou people's livelihood in “ Personal information collection and management beyond the scope ” Special work and “ Net net 2022” In special action , The whole chain crackdown on violations of citizens' personal information highlights the relevant situations and typical cases of network crimes . among , Guangzhou police announced the first case of application of 《 Data security law of the people's Republic of China 》 The case of ： A company in Guangzhou was punished by the police for failing to fulfill its obligation of data security protection 5 Ten thousand yuan .

Illegally invade the driving training system to brush class hours ,3 Three suspects were arrested

from 2021 year 10 From the end of the month , A company in Guangzhou has received complaints from its partner driving schools and local operation departments , There is a third party who pretends to be the staff of the company , Claiming to be able to bypass the company's development “ Driving training platform ” Supporting vehicle terminal punch in mechanism , Let the driving school students practice without going to the scene , Complete the accumulation of driving practice hours in the system , So as to complete the strict requirements of the regulatory authorities on the driving test training hours .

After in-depth study and judgment, Guangzhou Police , Dig up a criminal gang . The gang illegally cracked through technical means “ Driving training platform ” System , Send the false training data package to the platform server , Revise the class hours of students , In order to help students complete the training quickly and make a quick profit in the driving school . The illegal activities of the gang , Seriously endangering road traffic safety , The plot is very bad .

This year, 5 month 12 Japan , Guangzhou police launched an operation to close the Internet , Capture, including technology development and agents 3 Suspects , A batch of computer equipment used to destroy the information system was seized at the scene . Preliminary statistics , The case involves 30 There are more than driving schools 、90 More than one driving school coach car training terminal 、5000 More than driving school students , The Gang made a profit of about 35 Ten thousand yuan . at present , The case is being investigated further .

Fail to fulfill the obligation of data security protection , A company was punished by the police 5 Ten thousand yuan

At the same time of the criminal crackdown on the case of illegally invading the driving training system to swipe class hours , Guangzhou police carried out “ Two investigations in one case ”. Comprehensively carry out network security and data security inspection on the network system of the above companies .

Guangzhou police found , The company developed “ Driving training platform ” The names of driving school trainees are stored 、 ID number 、 cell-phone number 、 Personal photos and other information 1070 More than ten thousand , However, the company has not established a data security management system and operating procedures , No de identification and encryption measures have been taken for the personal information of driving school students collected from daily business activities , There are serious data security risks such as unauthorized access vulnerabilities in the system . Once the system platform is broken and stolen by criminals , It will lead to the disclosure of personal information of a large number of driving school students , Have a major impact on the personal interests of the broad masses .

according to 《 Data security law of the people's Republic of China 》 Relevant provisions of , Guangzhou police are responsible for the company's illegal act of failing to fulfill its obligation of data security protection , A warning and a fine of RMB shall be imposed in accordance with the law 5 Administrative penalty of ten thousand yuan , It has created the application of public security organs in Guangdong Province 《 Data security law of the people's Republic of China 》 Precedent , Actively explore and practice data security governance .

The police warned ： Network security is related to national security , All units and individuals have the responsibility and obligation to protect data security , Especially holding 、 A unit that has a large amount of personal information of citizens , We should take protective measures strictly in accordance with the law , Effectively ensure the safety of citizens' personal information .

writing / Guangzhou daily · New flower city reporter ： Ye zuolin 、 Zhang Danyang correspondent ： Wang Bingxin 、 Zhang Yitao 、 Qiu Lihong

Picture source ： Vision China