每周数据法律资讯 Data Law Weekly（20260119—20260125）

1. 国家网信办发布《金融信息服务数据分类分级指南（征求意见稿）》

1月24日，国家网信办发布《金融信息服务数据分类分级指南（征求意见稿）》，指南规定了金融信息服务数据分类分级规则，适用于在中华人民共和国境内从事金融信息服务的金融信息服务提供者开展数据分类分级和重要数据识别工作。指南将金融信息服务数据从高到低分为四级，分别为核心数据、重要数据、敏感一般数据、常规一般数据。

【参见：

https://mp.weixin.qq.com/s/NgRdiqnQFrhfZa3HUO_BZA】

The CAC released the “Guidelines for Classifying and Grading Financial Information Service Data (Draft for Comment)”

On January 24, the Cyberspace Administration of China (CAC) released the “Guidelines for Classifying and Grading Financial Information Service Data (Draft for Comment).” The guidelines establish rules for classifying and grading financial information service data, applicable to financial information service providers operating within the PRC for conducting data classification, grading, and identification of important data. The guidelines classify financial information service data into four tiers from highest to lowest: Core Data, Important Data, Sensitive General Data, and Routine General Data.

[Reference:

https://mp.weixin.qq.com/s/NgRdiqnQFrhfZa3HUO_BZA]

2. 国家网信办等部门联合发布《可能影响未成年人身心健康的网络信息分类办法》

1月23日，国家网信办等部门联合发布《可能影响未成年人身心健康的网络信息分类办法》。《办法》规定了可能影响未成年人身心健康的网络信息的4种类型及具体表现形式，对可能影响未成年人身心健康的网络信息，网站平台和内容生产者应当采取防范和抵制措施，避免对未成年人产生负面影响。同时《办法》要求制作、复制、发布、传播可能影响未成年人身心健康的网络信息的组织和个人，在信息展示前，在明显位置作出显著提示，网络产品和服务提供者应当为用户提供添加显著提示效果的标识功能，引导和规范用户对相关信息作出提示。

【点击查阅办法全文：

https://mp.weixin.qq.com/s/xSrs54DBcvchDd5KeYW2Jg】

The CAC and other departments jointly issued the “Classification Measures for Online Information That May Affect the Physical and Mental Health of Minors”

On January 23, the CAC and other departments jointly issued the “Measures for Classifying Online Information That May Affect the Physical and Mental Health of Minors.” The Measures define four categories of online information that may affect minors' physical and mental health, along with their specific manifestations. Website platforms and content producers must implement preventive and countermeasures against such information to avoid negative impacts on minors. Additionally, the Measures require organizations and individuals involved in producing, duplicating, publishing, or disseminating online information that may affect minors' physical and mental health to prominently display clear warnings in conspicuous locations before displaying such information. Providers of online products and services must offer users the functionality to add prominent warning labels, guiding and standardizing users' ability to flag relevant information.

[Click to view full text of the Measures:

https://mp.weixin.qq.com/s/xSrs54DBcvchDd5KeYW2Jg]

3. 最高人民检察院发布个人信息保护检察公益诉讼典型案例

1月22日，最高人民检察院发布了一批个人信息保护检察公益诉讼典型案例。本次发布的典型案例共6件，涉及智慧停车场、小区人脸识别、网络虚假招聘、“网络开盒”、逝者及其亲属个人信息泄露、“黄牛”及旅行社滥用个人信息等场景。

【参见：

https://mp.weixin.qq.com/s/NkaPhJnl4eQSSrAUXqrWRg】

Supreme People’s Procuratorate released exemplary cases of procuratorial public interest litigation on personal information protection

On January 22, the Supreme People’s Procuratorate released a batch of exemplary cases involving procuratorial public interest litigation on personal information protection. The six cases cover scenarios including smart parking lots, residential community facial recognition systems, online fake job postings, “online unboxing” scams, leakage of personal information of deceased individuals and their relatives, and abuse of personal information by scalpers and travel agencies.

[Reference:

https://mp.weixin.qq.com/s/NkaPhJnl4eQSSrAUXqrWRg]

4. 多地公布个人信息保护负责人信息报送和未成年人个人信息保护合规审计情况报送工作咨询电话

近日，上海、北京、浙江等多地网信部门发布了个人信息保护负责人信息报送和未成年人个人信息保护合规审计情况报送工作咨询电话的公告。

上海咨询电话：

https://mp.weixin.qq.com/s/o38ndkPpuKA0SkfQ-TkW3A

北京咨询电话：

https://mp.weixin.qq.com/s/8NK1bVVS95ChlsU_eSwnGw

浙江咨询电话：

https://mp.weixin.qq.com/s/fCyt6a7MSn1d8SPLK45vuQ

Multiple regions released hotlines for reporting personal information protection officers and compliance audits on minors' personal information protection

Recently, cyberspace administration departments in Shanghai, Beijing, Zhejiang, and other regions have announced hotlines for reporting personal information protection officers and compliance audit results on minors' personal information protection.

Shanghai Hotline:

https://mp.weixin.qq.com/s/o38ndkPpuKA0SkfQ-TkW3A

Beijing Hotline:

https://mp.weixin.qq.com/s/8NK1bVVS95ChlsU_eSwnGw

Zhejiang Hotline:

https://mp.weixin.qq.com/s/fCyt6a7MSn1d8SPLK45vuQ

5. 湖南网信办对某未经委托方同意擅自分包的受托数据处理者进行处罚

近日，湖南省网信办在依法查处某信息公司未履行数据安全保护义务案件过程中，查明该案件关联公司某科技公司在未经委托方同意擅自分包的情况下，未经同意向某信息公司提供个人信息数据，未对某信息公司履行网络数据安全义务的情况进行有效监督。湖南省网信办依据《网络数据安全管理条例》，对该科技公司作出警告，并对该公司、主管人员分别处罚款三十万元、三万元的行政处罚。

【参见：

Hunan Cyberspace Administration penalized an entrusted data processor for unauthorized subcontracting without client consent

Recently, during the investigation of an information company’s failure to fulfill data security obligations, the Hunan Cyberspace Administration discovered that an affiliated technology company had subcontracted work without the client’s consent. This company provided personal information data to the information company without authorization and failed to effectively supervise the latter’s compliance with network data security obligations. Pursuant to the Regulations on the Management of Cyber Data Security, the Hunan Cyberspace Administration issued a warning to the technology company and imposed administrative penalties of 300,000 yuan on the company and 30,000 yuan on its responsible personnel.

[Reference:

https://mp.weixin.qq.com/s/PvI3ZBozl02mPPJ339J8zQ]

6. 国标《数据安全技术个人信息保护合规审计要求》获批发布

近日，推荐性国家标准GB/T 46903-2025《数据安全技术个人信息保护合规审计要求》获批发布。《数据安全技术个人信息保护合规审计要求》规定了个人信息保护合规审计的实施流程、内容和方法等要求。

【点击查阅标准全文：

https://openstd.samr.gov.cn/bzgk/gb/newGbInfo?hcno=EC64C138A5B6A52AA5DC5A60188FC07E&refer=outter】

National standard “Data Security Technology - Personal Information Protection Compliance Audit Requirements” approved for release

Recently, the recommended national standard GB/T 46903-2025 “Data Security Technology - Personal Information Protection Compliance Audit Requirements” was approved for release. This standard specifies requirements for the implementation process, content, and methods of personal information protection compliance audits.

[Click to view the full text of the standard:

https://openstd.samr.gov.cn/bzgk/gb/newGbInfo?hcno=EC64C138A5B6A52AA5DC5A60188FC07E&refer=outter]

7. 金融监管总局发布《关于开展金融机构数据安全管理能力提升专项行动的通知》

近日，国家金融监督管理总局办公厅颁发了《关于开展金融机构数据安全管理能力提升专项行动的通知》（金办发〔2025〕93 号）并召开专项部署会议。此次专项行动以能力验证为抓手，旨在推动《银行保险机构数据安全管理办法》的落地实施，全面提升金融机构的数据安全治理能力。专项行动重点关注内容包括数据安全治理体系、个人信息保护、数据分类分级保护等。

The National Financial Regulatory Administration issued the “Notice on Launching a Special Campaign to Enhance Data Security Management Capabilities of Financial Institutions”

Recently, the General Office of the National Financial Regulatory Administration issued the “Notice on Launching a Special Campaign to Enhance Data Security Management Capabilities of Financial Institutions” and convened a special deployment meeting. This special campaign, centered on capability verification, aims to advance the implementation of the “Measures for the Administration of Data Security of Banking and Insurance Institutions” and comprehensively enhance the data security governance capabilities of financial institutions. Key focus areas include data security governance systems, personal information protection, and data classification and graded protection.

1. EDPB和EDPS就《人工智能综合法案》提案发布联合意见

1月21日，欧洲数据保护委员会（EDPB）与欧洲数据保护监督机构（EDPS）发布了《关于简化人工智能统一规则实施的法规提案的EDPB-EDPS联合意见1/2026》。该联合意见于2026年1月20日通过，旨在审议欧盟委员会修订《欧盟人工智能法案》的提案，该提案旨在简化法案实施流程。

【参见：

https://www.edpb.europa.eu/system/files/2026-01/edpb_edps_jointopinion_202601_proposal_ai-omnibus_en.pdf】

EDPB and EDPS published joint opinion on Digital Omnibus on AI Regulation Proposal

On January 21, the European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS) published the EDPB-EDPS Joint Opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonized rules on artificial intelligence (Digital Omnibus on AI). The Joint Opinion was adopted on January 20, 2026, and looks at the European Commission's proposal to amend the EU Artificial Intelligence Act (the AI Act), which aims to simplify its implementation.

[Reference:

https://www.edpb.europa.eu/system/files/2026-01/edpb_edps_jointopinion_202601_proposal_ai-omnibus_en.pdf]

2. 英国推动16岁以下未成年人禁用社交媒体

1月21日，英国议会上议院1月21日表决通过一项禁止16岁以下未成年人使用社交媒体的修正案，分析认为，这对英国政府形成压力，敦促其效仿澳大利亚推出类似禁令。

【参见：

https://mp.weixin.qq.com/s/ShO37piQApnBYiJTx-Vjlw】

UK pushes for social media ban on Minors under 16

On January 21, the UK House of Lords passed an amendment prohibiting minors under 16 from using social media. Analysts suggest this puts pressure on the UK government to follow Australia's lead and introduce similar restrictions.

[Reference:

https://mp.weixin.qq.com/s/ShO37piQApnBYiJTx-Vjlw]