每周数据法律资讯 Data Law Weekly（20260209—20260222）

1.  网信部门从严整治传播无AI标识的虚假不实信息问题

2月12日，网信部门发布公告称，近期部分网络账号发布AI生成合成信息时，不添加AI标识，存在利用虚假不实内容欺骗误导公众的问题，破坏网络生态，造成恶劣影响。网信部门督促网站平台深入排查整治，依法依约处置违规账号，清理违法违规信息。下一步，网信部门将对无AI标识的虚假不实信息保持高压严管态势，发现即处置，严厉打击违规行为。

【参见：

https://mp.weixin.qq.com/s/yuqoAxKTuc82tNEqfGK_-Q】

Cyberspace Administration Tightens Crackdown on Spreading False Information Without AI Labels

On February 12, the Cyberspace Administration announced that some online accounts have recently published AI-generated synthetic information without adding AI labels. This practice deceives and misleads the public with false content, undermines the online ecosystem, and causes severe negative impacts. The administration has urged websites and platforms to conduct thorough investigations and rectifications, handle non-compliant accounts according to laws and agreements, and remove illegal and non-compliant information. Moving forward, the Cyberspace Administration will maintain a high-pressure stance against false and misleading information lacking AI labels, taking immediate action upon discovery and cracking down on violations.

[Reference:

https://mp.weixin.qq.com/s/yuqoAxKTuc82tNEqfGK_-Q]

2. 《数据安全技术个人信息保护合规审计专业机构能力要求》征求意见稿发布

2月11日，全国网络安全标准化技术委员会发布国家标准《数据安全技术个人信息保护合规审计专业机构能力要求》征求意见稿。该文件规定了专业机构开展个人信息保护合规审计服务的能力要求。个人信息保护合规审计专业机构能力要求框架由基本条件、管理能力、人员能力、专业能力、资源能力5部分组成。

【参见：

https://www.tc260.org.cn/portal/suggestion-detail/3bb57023c00a464faf4c2f7b9a5524c7】

Draft National Standard “Data Security Technology - Competency Requirements for Professional Organizations Conducting Personal Information Protection Compliance Audits” Released

On February 11, the TC260 released the draft national standard “Data Security Technology - Competency Requirements for Professional Organizations Conducting Personal Information Protection Compliance Audits.” This document specifies the competency requirements for professional organizations providing personal information protection compliance audit services. The competency framework for such organizations comprises five components: basic conditions, management capabilities, personnel capabilities, professional capabilities, and resource capabilities.

[Reference:

https://www.tc260.org.cn/portal/suggestion-detail/3bb57023c00a464faf4c2f7b9a5524c7]

3. 工信部等五部门发布关于加强信息通信业能力建设支撑低空基础设施发展的实施意见

2月10日，工信部等五部门联合发布《关于加强信息通信业能力建设支撑低空基础设施发展的实施意见》。意见强调强化网络和数据安全保障，探索构建信息类基础设施网络和数据安全保障体系，落实网络安全等级保护、关键信息基础设施安全保护等制度要求，深化信息通信业网络安全防护管理，加强数据分类分级保护，推进网络和数据安全标准研制，开展监测预警、检测评估、应急处置等能力建设，推动相关企业落实安全主体责任。

【参见：

https://wap.miit.gov.cn/jgsj/txs/wjfb/art/2026/art_75ff4347c9ed418c825daee876b50a66.html】

Five Departments Including the Ministry of Industry and Information Technology Release Implementation Opinions on Strengthening Information and Communications Industry Capabilities to Support Low-Altitude Infrastructure Development

On February 10, five departments including the Ministry of Industry and Information Technology jointly released the “Implementation Opinions on Strengthening Information and Communications Industry Capabilities to Support Low-Altitude Infrastructure Development.” The document emphasizes strengthening cyber and data security safeguards, exploring the establishment of a security assurance system for information infrastructure networks and data, implementing cybersecurity grading protection and critical information infrastructure security protection requirements, deepening cybersecurity protection management in the information and communications industry, enhancing data classification and tiered protection, advancing the development of cyber and data security standards, and building capabilities in monitoring and early warning, detection and assessment, and emergency response. It also urges relevant enterprises to fulfill their primary security responsibilities.

[Reference:

https://wap.miit.gov.cn/jgsj/txs/wjfb/art/2026/art_75ff4347c9ed418c825daee876b50a66.html]

4. 《网络安全标准实践指南——互联网平台新型腐败预防和处置要求》发布

2月10日，全国网络安全标准化技术委员会发布《网络安全标准实践指南——互联网平台新型腐败预防和处置要求》。本《实践指南》规定了预防和处置互联网平台人员新型腐败的基本要求、日常防范要求和处置要求，适用于预防和处置互联网平台人员发生的流量操控、数据舞弊、权限寻租、榜单造假等新型腐败问题。

【参见：

https://www.tc260.org.cn/portal/article/2/c2b7955a67e542cdbcb7714e4735a35a?sessionid=】

“Cybersecurity Standard Practice Guide—Requirements for Preventing and Addressing New Forms of Corruption on Internet Platforms” Released

On February 10, the TC260 released the “Practical Guide to Cybersecurity Standards: Prevention and Handling Requirements for New Forms of Corruption on Internet Platforms.” This Practical Guide specifies fundamental requirements for preventing and handling new forms of corruption among internet platform personnel, including daily prevention measures and handling procedures. It applies to preventing and addressing new corruption issues such as traffic manipulation, data fraud, abuse of authority for personal gain, and chart manipulation occurring among internet platform personnel.

[Reference:

https://www.tc260.org.cn/portal/article/2/c2b7955a67e542cdbcb7714e4735a35a?sessionid= ]

1. 英国新规要求企业必须在48小时内删除未经同意的私密影像

2月19日，英国政府发布公告称，政府要求科技平台检测并删除未经同意传播的私密图像，企业被明确要求：任何被举报的非自愿私密图像必须在48小时内删除。否则，企业可能面临全球合收入10%的罚款或在英国被封禁服务。英拓政府决心确保受害者只需举报一次图片。这意味着当某张图片被举报后，它将被同时从多个平台移除，此后每次新上传时都会被自动删除。

【参见：

https://www.gov.uk/government/news/tech-firms-will-have-to-take-down-abusive-images-within-48-hours-under-new-law-to-protect-women-and-girls】

New UK Regulations Require Companies To Remove Non-consensual Intimate Images Within 48 Hours

On February 19, the UK government announced that tech platforms must detect and remove intimate images shared without consent. Firms put on notice that any non-consensual intimate image that is flagged to them must be taken down in under 48 hours. Platforms that fail to act could face fines of up to 10% of their qualifying worldwide revenue or having their services blocked in the UK. The government is determined to make sure that victims will only need to report an image once. This would mean where an image is reported, they are removed across multiple platforms in one go, and from then on, they are automatically deleted at every new upload.

[Reference:

https://www.gov.uk/government/news/tech-firms-will-have-to-take-down-abusive-images-within-48-hours-under-new-law-to-protect-women-and-girls]

2. 欧盟委员会依据《数字服务法》对Shein启动调查

2月17日，欧盟委员会依据《数字服务法》正式对Shein启动调查程序，指控其存在成瘾性设计、推荐系统缺乏透明度以及销售非法产品等问题。

【参见：

https://ec.europa.eu/commission/presscorner/detail/en/ip_26_420】

European Commission Launches Investigation into Shein Under Digital Services Act

On February 17, the European Commission has opened formal proceedings against Shein, under the Digital Services Act, for its addictive design, the lack of transparency of recommender systems, as well as the sale of illegal products.

[Reference:

https://ec.europa.eu/commission/presscorner/detail/en/ip_26_420]
 

3. LV/迪奥/蒂芙尼因个人信息泄露被韩国处以360亿韩元罚款

2月12日，韩国个人信息保护委员会宣布对LV/迪奥/蒂芙尼三家奢侈品牌销售企业处以360.33亿韩元罚款和1080万韩元罚款，这三家企业在使用SaaS服务过程中发生了个人信息泄露事件。韩国个人信息保护委员会强调处理个人信息的SaaS软件必须采取安全措施，如限制访问IP、采用安全认证方法以及保存和检查访问记录。

【参见：

https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=11817#LINKhttps://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=11817#LINK】

LV/Dior/Tiffany Fined 36 Billion Won by South Korea for Personal Data Breach

On February 12, South Korea's Personal Information Protection Commission announced fines totaling 36.033 billion won and 10.8 million won against three luxury brand distributors—LV, Dior, and Tiffany—following personal data breaches during their use of SaaS services. The PIPC emphasized that SaaS software processing personal information must implement security measures such as restricting IP access, adopting secure authentication methods, and maintaining and auditing access logs.

[Reference:

https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=11817# LINKhttps://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=11817#LINK]