每周数据法律资讯 Data Law Weekly（20260202—20260208）

1. 网信部门对快手平台依法作出处罚

针对近期快手平台出现大量色情低俗内容直播问题，网信部门依法对快手公司涉嫌违法行为进行立案调查。经查实，快手平台未履行网络安全保护义务，未及时处置系统漏洞等安全风险，未对用户发布的违法信息立即采取停止传输、消除等处置措施，情节严重，影响恶劣。2月6日，北京市网信办依法对快手公司处警告、1.191亿元人民币罚款处罚，同时责令其限期改正、依法依约处置账号、从严处理责任人。

【参见：

https://mp.weixin.qq.com/s/DpT1l5RSN-CBCIYbRnONxA】

Cyberspace Administration Imposed Penalties on Kuaishou Platform

In response to the recent surge of pornographic and vulgar content livestreams on the Kuaishou platform, the Cyberspace Administration has initiated an investigation into Kuaishou Company's suspected illegal activities. The investigation confirmed that Kuaishou failed to fulfill its cybersecurity protection obligations, neglected to promptly address security risks such as system vulnerabilities, and did not immediately take measures to halt transmission or remove illegal user-posted content. These violations were severe and had a detrimental impact. On February 6, the Beijing Cyberspace Administration lawfully issued a warning and imposed a fine of 119.1 million yuan on Kuaishou Company. It also ordered the company to rectify violations within a specified timeframe, handle accounts in accordance with laws and agreements, and strictly discipline responsible personnel.

[Reference:

https://mp.weixin.qq.com/s/DpT1l5RSN-CBCIYbRnONxA]

2. 市场监管总局公布五起人工智能领域不正当竞争典型案例

2月6日，市场监管总局公布了五起人工智能领域不正当竞争典型案例，包括：一、北京市朝阳区市场监管局查处北京奥蓝德信息科技有限公司利用网络实施混淆案；二、上海市徐汇区市场监管局查处上海熵云网络科技有限公司利用网络实施混淆案；三、上海市市场监管局查处上海俏聘网络信息科技有限公司帮助虚假宣传；四、浙江省杭州市市场监管局查处闵某某侵犯商业秘密案；五、杭州市西湖区市场监管局查处杭州博珩文化传媒有限公司利用网络实施混淆案。

【参见：

https://mp.weixin.qq.com/s/5nd7k40VHU1iuuYbM1z3Pw】

State Administration for Market Regulation Released Five Typical Cases of Unfair Competition in the AI Sector

On February 6, the State Administration for Market Regulation released five typical cases of unfair competition in the artificial intelligence sector, including: 1. The Chaoyang District Market Regulation Bureau in Beijing investigated Beijing Aolande Information Technology Co., Ltd. for online confusion; 2. The Xuhui District Market Regulation Bureau in Shanghai investigated Shanghai Shangyun Network Technology Co., Ltd. for online confusion; 3. Shanghai Market Regulation Administration investigated Shanghai Qiaopin Network Information Technology Co., Ltd. for aiding in false advertising; 4. Hangzhou Market Regulation Administration in Zhejiang Province investigated Min for trade secret infringement; 5. Hangzhou Xihu District Market Regulation Administration investigated Hangzhou Boheng Culture Media Co., Ltd. for online confusion.

[Reference:

https://mp.weixin.qq.com/s/5nd7k40VHU1iuuYbM1z3Pw]

3. 《汽车数据出境安全指引（2026版）》发布

2月3日，工信部等八部门联合印发《汽车数据出境安全指引（2026版）》，汽车数据处理者按照该指引开展数据出境活动。指引明确了汽车数据处理者免予申报数据出境安全评估、订立个人信息出境标准合同、通过个人信息出境认证的情形。同时，指引列明了在研发设计、生产制造、驾驶自动化、软件升级服务、联网运行等场景下的汽车重要数据的判定规则，并规定了汽车数据出境的安全保护要求。

【参见：

https://mp.weixin.qq.com/s/l24byrz3i4Su-2BSz5aYlA】

Guidelines for the Security of Vehicle Data Transfer Abroad (2026 Edition) Issued

On February 3, eight departments including the Ministry of Industry and Information Technology jointly issued the Guidelines for the Security of Vehicle Data Transfer Abroad (2026 Edition). Vehicle data processors shall conduct data transfer activities abroad in accordance with these guidelines. The guidelines clarify scenarios where vehicle data processors are exempt from declaring data transfer security assessments, entering into standard contracts for personal information transfer abroad, and obtaining personal information transfer certification. Additionally, the guidelines establish criteria for identifying critical vehicle data across scenarios including R&D design, manufacturing, automated driving, software update services, and connected operations, while specifying security protection requirements for cross-border vehicle data transfers.

[Reference:

https://mp.weixin.qq.com/s/l24byrz3i4Su-2BSz5aYlA]

4. 国家计算机病毒应急处理中心检测发现72款违法违规收集使用个人信息的移动应用

2月3日，国家网络安全通报中心发布了关于72款移动应用存在违法违规收集使用个人信息情况的通报。相关应用存在的问题包括但不限于实现相同目的或者达到同等业务要求，存在其他非人脸识别技术方式的，将人脸识别技术作为唯一验证方式；未以显著方式标示且未经用户同意，将收集到的用户搜索等个人信息，用于定向推送或广告精准营销，且未提供关闭该功能选项的行为。

【参见：

https://mp.weixin.qq.com/s/gkioia6dZIwcrxzpc5utRA】

National Computer Virus Emergency Response Center Identified 72 Mobile Apps Illegally Collecting and Using Personal Information

On February 3, the National Cybersecurity Notification Center issued a notice regarding 72 mobile applications that illegally collect and use personal information. Issues identified in these apps include, but are not limited to: Using facial recognition as the sole verification method when alternative non-facial recognition technologies exist to achieve the same purpose or meet equivalent business requirements; failing to prominently disclose and obtain user consent before using collected personal information (such as user search data) for targeted push notifications or precision advertising, while also failing to provide an option to disable this functionality.

[Reference:

https://mp.weixin.qq.com/s/gkioia6dZIwcrxzpc5utRA ]

1.欧盟委员会初步认定TikTok的成瘾性设计违反了《数字服务法》

2月6日，欧盟委员会初步认定TikTok因其成瘾性设计违反《数字服务法》。相关功能包括无限滚动、自动播放、推送通知及其高度个性化的推荐系统。TikTok现可行使辩护权，查阅欧盟委员会调查文件并就初步认定结果提交书面答复。若欧盟委员会最终确认其立场，将发布不合规决定，并可能处以与违规性质、严重程度、重复发生及持续时间相称的罚款，最高可达全球年营业额的6%。

【参见：

https://ec.europa.eu/commission/presscorner/detail/en/ip_26_312】

European Commission Preliminarily Found TikTok's Addictive Design In Breach of The Digital Services Act

On February 6, the European Commission preliminarily found TikTok in breach of the Digital Services Act for its addictive design. This includes features such as infinite scroll, autoplay, push notifications, and its highly personalised recommender system. TikTok now has the possibility to exercise its right to defence. It may examine the documents in the Commission's investigation files and reply in writing to the Commission's preliminary findings. If the Commission's views are ultimately confirmed, the Commission may issue a non-compliance decision, which can trigger a fine proportionate to the nature, gravity, recurrence and duration of the infringement and reach up to but not more than 6% of the total worldwide annual turnover.

[Reference:

https://ec.europa.eu/commission/presscorner/detail/en/ip_26_312]

2. 爱尔兰发布了《2026年人工智能监管法案总体方案》

2月4日，爱尔兰企业、旅游与就业部发布了《2026年人工智能监管法案总体方案》，以在爱尔兰实施欧盟人工智能法。该法案规定成立爱尔兰人工智能办公室作为法定机构，职能包括促进欧盟人工智能法的一致执行、促进主管部门间的合作、推动人工智能创新/采用及人工智能素养提升，以及促进主管部门获取技术专业知识。

【参见：

https://enterprise.gov.ie/en/legislation/general-scheme-of-the-regulation-of-artificial-intelligence-bill-2026.html】

Ireland Released the General Scheme of the Regulation of Artificial Intelligence Bill 2026

On February 4, Ireland's Department of Enterprise, Tourism and Employment released the General Scheme of the Regulation of Artificial Intelligence Bill 2026 to implement the EU AI Act in Ireland. The Bill establishes the AI Office of Ireland as a statutory body, with functions including facilitating consistent enforcement of the EU AI Act, enabling cooperation among competent authorities, promoting artificial intelligence (AI) innovation/adoption and AI literacy, and facilitating access to technical expertise for competent authorities.

[Reference:

https://enterprise.gov.ie/en/legislation/general-scheme-of-the-regulation-of-artificial-intelligence-bill-2026.html]

3. 埃及PDPC发布PDPL实施指南和官方模板

近日，埃及个人数据保护中心（PDPC）发布了《个人数据保护法》（PDPL）下的实施指南和官方模板。实施指南包括数据主体同意、合法处理依据、电子营销、数据保护官、处理活动记录以及隐私声明等内容。模板包括ROPA、向PDPC报告数据泄露的模板以及向数据主体发送数据泄露通知的模板。

【参见：

https://pdpc.gov.eg/laws】

Egypt's PDPC Releases PDPL Implementation Guidelines and Official Templates

Recently, Egypt's Personal Data Protection Center (PDPC) issued implementation guidelines and official templates under the Personal Data Protection Law (PDPL). The implementation guidelines cover data subject consent, lawful processing bases, electronic marketing, data protection officers, processing activity records, and privacy statements. The templates include the ROPA, a template for reporting data breaches to the PDPC, and a template for sending data breach notifications to data subjects.

[Reference:

https://pdpc.gov.eg/laws]