每周数据法律资讯 Data Law Weekly（20250825-20250831）

1. 最高人民法院首次发布数据权益司法保护专题指导案例

8月28日，最高人民法院发布第47批指导性案例（指导性案例262—267号）。这是最高人民法院首次发布数据权益司法保护专题指导性案例。该批指导性案例共六件，积极回应了数据权属认定、数据产品利用、个人信息保护、网络平台账号交付等社会高度关注的问题，统一了类案裁判尺度。

【参见：

https://mp.weixin.qq.com/s/Z2PL1_vhpliRUk_3_IX1ag】

Supreme People’s Court released first set of guiding cases on judicial protection of data-related rights

On August 28, the Supreme People’s Court released its 47th batch of guiding cases (Guiding Cases Nos. 262–267). This marks the first time the Supreme People's Court has issued guiding cases specifically addressing judicial protection of data-related rights. The batch comprises six cases that actively address highly scrutinized societal issues such as data ownership determination, data product utilization, personal information protection, and online platform account delivery, thereby unifying adjudication standards for similar cases.

[Reference:

https://mp.weixin.qq.com/s/Z2PL1_vhpliRUk_3_IX1ag]

2. 全国网安标委发布《人工智能生成合成内容标识方法文件元数据隐式标识文本文件》等6项网络安全标准实践指南

8月28日，全国网络安全标准化技术委员会发布6项网络安全标准实践指南。6项实践指南分别为：《人工智能生成合成内容标识方法文件元数据隐式标识视频文件》《人工智能生成合成内容标识方法文件元数据隐式标识文本文件》《人工智能生成合成内容标识方法文件元数据隐式标识图片文件》《人工智能生成合成内容标识方法文件元数据隐式标识音频文件》《人工智能生成合成内容标识方法文件元数据隐式标识安全防护技术指南》《人工智能生成合成内容检测第1部分框架》。

【参见：

https://mp.weixin.qq.com/s/JVyu73SFWIN3jEi-ChdMJg】

The TC260 released drafts for comment of six Cybersecurity Standard Practice Guidelines, including “Identification Methods for AI-Generated and Synthetic Content: Implicit Identification of File Metadata - Text Files”

On June 24, the TC260 released drafts for comments of six cybersecurity standard practice guidelines and solicited public comments. The six practice guidelines are: “Identification Methods for AI-Generated and Synthetic Content: Implicit Identification of File Metadata - Video Files”（《人工智能生成合成内容标识方法文件元数据隐式标识视频文件》）, “Identification Methods for AI-Generated and Synthetic Content: Implicit Identification of File Metadata - Text Files”（《人工智能生成合成内容标识方法文件元数据隐式标识文本文件》）, “Identification Methods for AI-Generated and Synthetic Content: Implicit Identification of File Metadata - Image Files”（《人工智能生成合成内容标识方法文件元数据隐式标识图片文件》）, “Identification Methods for AI-Generated and Synthetic Content: Implicit Identification of File Metadata - Audio Files”,（《人工智能生成合成内容标识方法文件元数据隐式标识音频文件》）“Identification Methods for AI-Generated and Synthetic Content: Implicit Identification of File Metadata - Video Files”, 《人工智能生成合成内容标识方法文件元数据隐式标识安全防护技术指南》and “Detection of AI-Generated and Synthetic Content. The First Part Framework” （《人工智能生成合成内容检测第1部分框架》）

[Reference：

https://mp.weixin.qq.com/s/JVyu73SFWIN3jEi-ChdMJg]

3. 全国网安标委发布《数据安全技术个人信息匿名化处理指南及评价方法》等四项国家标准的征求意见稿

8月27日，全国网安标委发布4项国家标准的征求意见稿，分别为：《网络安全技术鉴别与授权基于属性的访问控制模型与管理规范》《网络安全技术开放的第三方资源授权协议》《网络安全技术物联网安全参考模型及通用要求》《数据安全技术个人信息匿名化处理指南及评价方法》。

【参见：

https://mp.weixin.qq.com/s/WQGHMJB8ipbMoI7r7UFGQQ】

TC260 released drafts for public comment on four national standards, including “Data security technology - Guideline and evaluation method for anonymization of personal information”（《数据安全技术个人信息匿名化处理指南及评价方法》）

On August 27, the TC260 released drafts for public comment on four national standards: “Cybersecurity Technology - Authentication and Authorization - Attribute-Based Access Control Model and Management Specifications” （《网络安全技术鉴别与授权基于属性的访问控制模型与管理规范》）, “Cybersecurity Technology - Open Third-Party Resources - Authorization Protocol” （《网络安全技术开放的第三方资源授权协议》）, “Cybersecurity Technology - IoT Security Reference Model and General Requirements” 《网络安全技术物联网安全参考模型及通用要求》, and “Data security technology - Guideline and evaluation method for anonymization of personal information” 《数据安全技术个人信息匿名化处理指南及评价方法》。

[Reference:

https://mp.weixin.qq.com/s/WQGHMJB8ipbMoI7r7UFGQQ]

4. 公安部计算机信息系统安全产品质量监督检验中心检测发现38款违法违规收集使用个人信息的移动应用

8月25日，公安部计算机信息系统安全产品质量监督检验中心通报38款移动应用存在违法违规收集使用个人信息情况，该等移动应用所涉的问题主要包括：未公开收集使用规则；在申请打开可收集个人信息的权限时，未同步告知用户其目的；在申请收集用户等个人敏感信息时，未同步告知用户其目的；实际收集的个人信息超出相关功能的必要范围；未向用户提供更正或补充其个人信息的具体途径等。

【参见：

https://mp.weixin.qq.com/s/u9rpg3yY6YmCP7UTDXncZA】

The Ministry of Public Security's Computer Information System Security Product Quality Supervision and Inspection Center identified 38 mobile applications that illegally collected and used personal information

On August 25, the Ministry of Public Security's Computer Information System Security Product Quality Supervision and Inspection Center reported that 38 mobile applications were found to be illegally collecting and using personal information. The primary issues involved in these mobile applications include: failing to disclose collection and usage rules; failing to inform users of the purpose when requesting permissions to access personal information; failing to inform users of the purpose when requesting sensitive personal information such as user data; collecting personal information beyond the necessary scope for relevant functions; and failing to provide users with specific channels to correct or supplement their personal information.

[Reference:

https://mp.weixin.qq.com/s/u9rpg3yY6YmCP7UTDXncZA]

5. 上海发布《上海市智能网联汽车测绘地理信息安全管理导则（试行）》

8月25日，上海市规划和自然资源局发布《上海市智能网联汽车测绘地理信息安全管理导则（试行）》。《导则》适用于上海市智能网联汽车高精度地图应用试点及“车路云一体化”应用试点中涉及的测绘地理信息安全工作，上海市其他智能网联汽车相关工作可参照适用。《导则》提出了六点智能网联汽车测绘活动的总体策略，包括：（1）数据即时安全处理；（2）数据采集最小必要；（3）地理信息脱密脱敏；（4）数据分级分类管理；（5）数据安全可控保障；（6）事故即时应急响应。

【参见：

https://ghzyj.sh.gov.cn/zcwj/chgl/20250825/7fb303a0931747f9a4f24b34dc4bfe60.html】

Shanghai released “Guidelines for the Security Management of Geospatial Information in Intelligent Connected Vehicle Surveying and Mapping (Trial)”（《上海市智能网联汽车测绘地理信息安全管理导则（试行）》）

On August 25, the Shanghai Municipal Bureau of Planning and Natural Resources issued the “Guideline for the Security Management of Geospatial Information in Intelligent Connected Vehicle Surveying and Mapping (Trial).”（《上海市智能网联汽车测绘地理信息安全管理导则（试行）》）The Guideline apply to surveying and mapping geographic information security work involved in Shanghai’s high-precision map application pilot for intelligent connected vehicles and the “vehicle-road-cloud integration” application pilot. Other intelligent connected vehicle-related work in Shanghai may refer to the Guideline for application. The Guideline propose six overall strategies for intelligent connected vehicle surveying activities, including: (1) real-time secure data processing; (2) minimal necessary data collection; (3) geographic information de-identification and anonymization; (4) graded and categorized data management;(5) Controllable data security safeguards; (6) immediate incident response.

[Reference:

https://ghzyj.sh.gov.cn/zcwj/chgl/20250825/7fb303a0931747f9a4f24b34dc4bfe60.html]

6. 上海网信办发布两期生成式人工智能服务已备案信息

8月25日与8月28日，上海网信办各发布了一期上海市生成式人工智能服务已备案信息公告。其中，8月25日公告新增1款已完成备案的生成式人工智能服务，8月28日公告新增9款已完成备案的生成式人工智能服务。截至8月28日，上海市累计已完成92款生成式人工智能服务备案。

【8月15日公告参见：
 

https://mp.weixin.qq.com/s/ja4jjrP0LWAld0Wdr3PZAA

8月28日公告参见:
 

https://mp.weixin.qq.com/s/6b6CJfUn61OxAD6r5dzhZg】

Shanghai Cyberspace Administration released two batches of generative AI service registered information

On August 25 and August 28, the Shanghai Cyberspace Administration Office released two separate announcements detailing generative AI services that have completed registration in Shanghai. The August 25 announcement added one newly registered generative AI service, while the August 28 announcement added nine newly registered generative AI services. As of August 28, Shanghai has cumulatively completed registration for 92 generative AI services.

[See the August 25 announcement:

 https://mp.weixin.qq.com/s/ja4jjrP0LWAld0Wdr3PZAA

See the August 28 announcement:

 https://mp.weixin.qq.com/s/6b6CJfUn61OxAD6r5dzhZg]

7. 国务院发布关于深入实施“人工智能+”行动的意见

8月21日，国务院发布关于深入实施“人工智能+”行动的意见，意见指出要深入实施“人工智能+”行动，到2027年，率先实现人工智能与6大重点领域广泛深度融合，新一代智能终端、智能体等应用普及率超70%，智能经济核心产业规模快速增长，人工智能在公共治理中的作用明显增强，人工智能开放合作体系不断完善。到2030年，我国人工智能全面赋能高质量发展，新一代智能终端、智能体等应用普及率超90%，智能经济成为我国经济发展的重要增长极，推动技术普惠和成果共享。到2035年，我国全面步入智能经济和智能社会发展新阶段，为基本实现社会主义现代化提供有力支撑。

【参见：

https://mp.weixin.qq.com/s/gQSIB2OGpHfbrUwA7-wKYw】

The State Council issued opinions on deepening the implementation of the “AI+” initiative

On August 21, the State Council issued opinions on deepening the implementation of the “AI+” initiative. The document emphasizes the need to advance the “AI+” initiative, aiming to achieve the following by 2027: - Pioneering the extensive and deep integration of AI with six key sectors - Achieving over 70% adoption rates for next-generation smart terminals and intelligent agents - Rapid expansion of core industries within the intelligent economy - Significantly enhanced role of AI in public governance - Continued improvement of the AI open cooperation system. By 2030, AI will comprehensively empower high-quality development in China. The adoption rate of next-generation smart terminals, intelligent agents, and other applications will exceed 90%. The intelligent economy will become a major growth engine for China's economic development, promoting technological inclusiveness and shared benefits. By 2035, China will fully enter a new phase of intelligent economic and societal development, providing robust support for the fundamental realization of socialist modernization.

[Reference:

https://mp.weixin.qq.com/s/gQSIB2OGpHfbrUwA7-wKYw]

1. 韩国SK电信公司泄露约一半韩国人口的个人数据，被处以1348亿韩元罚款

8月28日，韩国个人信息保护委员会（PIPC）对韩国SK电信公司”）违反个人信息保护法律法规的行为处以1347.91亿韩元的罚款和960万韩元的罚款。理由为该公司未能履行用户数据保护义务，且未及时上报数据泄露事件。同时，PIPC责令SK 电信公司加强个人数据监管，并透露此次泄露事件波及约2300万人，约为韩国人口的一半。这是韩国PIPC自2020年成立以来开出的最高罚单。

【参见：

https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=11453#LINK】

SK Telecom was fined 134.8 billion won for leaking the personal data of nearly half of South Korea’s population

On August 28, South Korea’s Personal Information Protection Commission (PIPC) imposed a fine of 134.791 billion won and an additional penalty of 9.6 million won on SK Telecom Co., Ltd. for failing to fulfill its user data protection obligations and not promptly reporting the data breach incident. The PIPC simultaneously ordered SK Telecom to strengthen personal data oversight and disclosed that the breach affected approximately 23 million people, roughly half of South Korea’s population. This represents the highest fine imposed by the PIPC since its establishment in 2020.

[Reference:

https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=11453#LINK]

2. 谷歌和YouTube将支付3000万美元，就未经父母同意收集数据违反儿童隐私法的诉讼达成和解

该诉讼最初在美国加利福尼亚州北区地方法院提起，原告是由其监护人代表的一群未成年儿童，指控YouTube及其母公司谷歌从在 YouTube上观看面向儿童的内容的儿童那里收集IP地址、设备标识符、位置信息等个人数据，但没有获得可验证的父母同意，违反了《儿童在线隐私保护法》（COPPA）。该案在经历了近六年的诉讼程序后，于近期达成和解协议，谷歌将支付3000万美元，以完全解决诉讼中针对他们的索赔，而无需承认任何责任或不当行为。

【参见：

https://www.reuters.com/sustainability/boards-policy-regulation/google-settles-youtube-childrens-privacy-lawsuit-2025-08-19/】

Google and YouTube will pay $30 million to settle a lawsuit alleging they violated children's privacy laws by collecting data without parental consent

The lawsuit was initially filed in the U.S. District Court for the Northern District of California. The plaintiffs, a group of minors represented by their guardians, alleged that YouTube and its parent company Google collected personal data—including IP addresses, device identifiers, and location information—from children watching child-directed content on YouTube without obtaining verifiable parental consent, violating the Children's Online Privacy Protection Act (COPPA). After nearly six years of litigation, the case recently reached a settlement agreement. Google will pay $30 million to fully resolve the claims against it in the lawsuit, without admitting any liability or wrongdoing.

[Reference:

https://www.reuters.com/sustainability/boards-policy-regulation/google-settles-youtube-childrens-privacy-lawsuit-2025-08-19/]