律所动态

每周数据法律资讯 Data Law Weekly(20260223—20260301)


发布时间:

2026-03-24

作者:

陈嘉伟律师等

来源:

目录

一、国内资讯

I. Domestic news

1. 国家网信办等部门印发《未成年人用户数量巨大和对未成年人群体具有显著影响的网络平台服务提供者认定办法》

The CAC and Other Departments Issue Measures for Identifying Online Platform Service Providers with a Massive Minor User Base and Significant Influence on Minors

 

2. 国家网信办发布《政务移动互联网应用程序备案工作指南(第一版)》

CAC Releases “Guidelines for Filing Government Mobile Internet Applications (First Edition)”

 

3. 国家市场监督管理总局发布《商业秘密保护规定》

State Administration for Market Regulation Issues Regulations on the Protection of Trade Secrets

 

二、国外资讯

II. Overseas news

1. 美国FTC发布政策声明,鼓励采用年龄验证技术保护儿童网络安全

FTC Issues COPPA Policy Statement to Incentivize the Use of Age Verification Technologies to Protect Children Online

 

2. Reddit因侵犯儿童隐私被罚款1447万英镑

Reddit Fined £14.47 Million for Violating Children's Privacy

 

3. 61家数据保护机构发布关于人工智能生成图像和隐私保护的联合声明

61 Data Protection Authorities Issue Joint Statement on AI-Generated Images and Privacy Protection

 

 

一

国内资讯(Domestic news)

 

1.  国家网信办等部门印发《未成年人用户数量巨大和对未成年人群体具有显著影响的网络平台服务提供者认定办法》

2月28日,国家网信办等八部门联合印发《未成年人用户数量巨大和对未成年人群体具有显著影响的网络平台服务提供者认定办法》。办法规定了未成年人用户数量巨大的网络平台服务提供者和对未成年人群体具有显著影响的网络平台服务提供者的认定标准。国家网信部门会同有关部门按照认定程序,研究启动认定工作。认定工作原则上每3年开展一次,网络平台服务提供者应当在收到通知之日起20个工作日内提交自评估报告。国家网信部门确定名单后将向社会公布。

【点击查阅认定办法全文:

https://mp.weixin.qq.com/s?__biz=MzAwMjU0MjIyNw==&mid=2651530817&idx=1&sn=8f84d12947301ee016261f4d6fa0c8f4&key=daf9bdc5abc4e8d0578aa43b0a8c3ab2209fd3fb4372ae1bb358620b91b5b707d471904017c071d224f2ab1c6f143dd4a7c02827e57211e3a51d631b8250c460f7d4a738af345cb0d8ae7c276d8b77b0e701b89c6505ba6551d29ab8d23c35f95c7fec9831066ae910125819bf2375a6ec00b34b2e3b13f35d55e4975dbd78d9&ascene=0&uin=ODE2OTYyMDgx&devicetype=UnifiedPCWindows&version=f254162e&lang=zh_CN&countrycode=CN&exportkey=n_ChQIAhIQEMhXUIikFIC7anLsMrS3FxLoAQIE97dBBAEAAAAAAIydDfp4Z0sAAAAOpnltbLcz9gKNyK89dVj0vOuvy5CIIH%2F8ATRowMVDq8sDULRX8NoCpo1NvruCM2HowV3n4hout%2FXfwojOdMQNV0qGDcip7b35Krxv6knD029dbvUGu8VPnYKyLXRCyeC2vgHnAc2KDv5CKXvHFrUUBbfBs6yk2%2FZOSHmObWlJ0X6vAyoxqwZfZfHkMfEH6kGSUqPZZBpkpDRn3XfXqNv%2BsBSc5T2RFrc3L9WPvcBoq7f9bm3qEwHBiaHbAmO5iczh3jh%2BIbtGcZFFjhn6YnP5dEw%3D&acctmode=0&pass_ticket=T7N2E3ZLhdhO28V8AeSluzjXDaIlC1BTt3SsxuGou7LOWCnpzAz2zOL%2BIacJutvf&wx_header=0】

【提示:

《未成年人网络保护条例》第二十条规定:

未成年人用户数量巨大或者对未成年人群体具有显著影响的网络平台服务提供者,应当履行下列义务:

(一)在网络平台服务的设计、研发、运营等阶段,充分考虑未成年人身心健康发展特点,定期开展未成年人网络保护影响评估;

(二)提供未成年人模式或者未成年人专区等,便利未成年人获取有益身心健康的平台内产品或者服务;

(三)按照国家规定建立健全未成年人网络保护合规制度体系,成立主要由外部成员组成的独立机构,对未成年人网络保护情况进行监督;

(四)遵循公开、公平、公正的原则,制定专门的平台规则,明确平台内产品或者服务提供者的未成年人网络保护义务,并以显著方式提示未成年人用户依法享有的网络保护权利和遭受网络侵害的救济途径;

(五)对违反法律、行政法规严重侵害未成年人身心健康或者侵犯未成年人其他合法权益的平台内产品或者服务提供者,停止提供服务;

(六)每年发布专门的未成年人网络保护社会责任报告,并接受社会监督。

前款所称的未成年人用户数量巨大或者对未成年人群体具有显著影响的网络平台服务提供者的具体认定办法,由国家网信部门会同有关部门另行制定。】

 

The CAC and Other Departments Issue Measures for Identifying Online Platform Service Providers with a Massive Minor User Base and Significant Influence on Minors

On February 28, the CAC and seven other departments jointly issued the Measures for Identifying Online Platform Service Providers with a Massive Minor User Base and Significant Influence on Minors. The Measures establish criteria for identifying online platform service providers with a large number of minor users and those exerting significant influence on minors. The Cyberspace Administration, in collaboration with relevant departments, will initiate the identification process according to established procedures. This process will generally be conducted every three years. Online platform service providers must submit self-assessment reports within 20 working days of receiving notification. The Cyberspace Administration will publicly announce the finalized list.

[Click to view full text of the Measures:

https://mp.weixin.qq.com/s?__biz=MzAwMjU0MjIyNw==&mid=2651530817&idx=1&sn=8f84d12947301ee016261f4d6fa0c8f4&key=daf9bdc5abc4e8d0578aa43b0a8c3ab2209fd3fb4372ae1bb358620b91b5b707d471904017c071d224f2ab1c6f143dd4a7c02827e57211e3a51d631b8250c460f7d4a738af345cb0d8ae7c276d8b77b0e701b89c6505ba6551d29ab8d23c35f95c7fec9831066ae910125819bf2375a6ec00b34b2e3b13f35d55e4975dbd78d9&ascene=0&uin=ODE2OTYyMDgx&devicetype=UnifiedPCWindows&version=f254162e&lang=zh_CN&countrycode=CN&exportkey=n_ChQIAhIQEMhXUIikFIC7anLsMrS3FxLoAQIE97dBBAEAAAAAAIydDfp4Z0sAAAAOpnltbLcz9gKNyK89dVj0vOuvy5CIIH%2F8ATRowMVDq8sDULRX8NoCpo1NvruCM2HowV3n4hout%2FXfwojOdMQNV0qGDcip7b35Krxv6knD029dbvUGu8VPnYKyLXRCyeC2vgHnAc2KDv5CKXvHFrUUBbfBs6yk2%2FZOSHmObWlJ0X6vAyoxqwZfZfHkMfEH6kGSUqPZZBpkpDRn3XfXqNv%2BsBSc5T2RFrc3L9WPvcBoq7f9bm3qEwHBiaHbAmO5iczh3jh%2BIbtGcZFFjhn6YnP5dEw%3D&acctmode=0&pass_ticket=T7N2E3ZLhdhO28V8AeSluzjXDaIlC1BTt3SsxuGou7LOWCnpzAz2zOL%2BIacJutvf&wx_header=0]

[Note:

Article 20 of the Regulations on the Protection of Minors Online stipulates:

Online platform service providers with a large number of minor users or significant influence on the minor population shall fulfill the following obligations:

(1) During the design, development, and operation phases of online platform services, fully consider the characteristics of minors' physical and mental health development and regularly conduct impact assessments on the protection of minors online;

(2) Provide a minor mode or dedicated minor section to facilitate minors' access to platform products or services beneficial to their physical and mental health;

(3) Establish and improve a compliance system for online protection of minors in accordance with national regulations, and set up an independent body primarily composed of external members to oversee the implementation of such protection;

(4) Formulate specific platform rules based on the principles of openness, fairness, and impartiality, clearly defining the obligations of product or service providers within the platform regarding the online protection of minors. Prominently inform minor users of their legally protected rights and available remedies for online harm;

(5) Terminate services for providers of platform products or services that violate laws or administrative regulations, seriously harm the physical and mental health of minors, or infringe upon other lawful rights and interests of minors;

(6) Annually publish a dedicated social responsibility report on online protection for minors and accept public oversight.

The specific criteria for identifying network platform service providers referred to in the preceding paragraph as having a large number of minor users or significant influence on the minor population shall be separately formulated by the national cyberspace administration in conjunction with relevant departments.]

 

2. 国家网信办发布《政务移动互联网应用程序备案工作指南(第一版)》

2月28日,国家网信办发布《政务移动互联网应用程序备案工作指南(第一版)》。政务应用程序上线前,主办(使用)单位应根据《政务移动互联网应用程序规范化管理办法》,按照备案工作指南履行备案程序。禁止以任何形式要求用户下载、安装或使用未经备案的政务应用程序。

【参见:

https://mp.weixin.qq.com/s/b526MPpH7J4ShLVZGrwZfQ】

 

CAC Releases “Guidelines for Filing Government Mobile Internet Applications (First Edition)”

On February 28, the CAC released the “Guidelines for Filing Government Mobile Internet Applications (First Edition).” Before launching government applications, sponsoring (using) entities must complete filing procedures in accordance with these guidelines and the “Standardized Management Measures for Government Mobile Internet Applications.” It is prohibited to require users to download, install, or use unfiled government applications in any form.

[Reference:

https://mp.weixin.qq.com/s/b526MPpH7J4ShLVZGrwZfQ]

 

3. 国家市场监督管理总局发布《商业秘密保护规定》

2月24日,国家市场监督管理总局发布《商业秘密保护规定》。规定明确了权利人采取的保密措施、经营者的不正当手段、保密义务或者权利人有关保守商业秘密的要求等认定情形。明确了权利人的商业信息属于商业秘密的初步证据材料的内容以及可以作为商业秘密涉嫌被侵犯的具体线索。该规定将自2026年6月1日起施行。

【点击查阅规定全文:

https://www.samr.gov.cn/zw/zfxxgk/fdzdgknr/fgs/art/2026/art_a89ca909478b460595670fabe02b21d3.html】

 

State Administration for Market Regulation Issues Regulations on the Protection of Trade Secrets

On February 24, the State Administration for Market Regulation issued the Regulations on the Protection of Trade Secrets. The regulations clarify the circumstances under which certain actions constitute trade secret protection measures taken by rights holders, unfair means employed by operators, breaches of confidentiality obligations, or requirements for safeguarding trade secrets imposed by rights holders. They also specify the content of preliminary evidence materials demonstrating that a rights holder's commercial information constitutes a trade secret, as well as concrete leads indicating potential trade secret infringement. These regulations will take effect on June 1, 2026.

[Click to view the full text of the regulations:

https://www.samr.gov.cn/zw/zfxxgk/fdzdgknr/fgs/art/2026/art_a89ca909478b460595670fabe02b21d3.html]

 

二

国外资讯(Overseas news)

 

1. 美国FTC发布政策声明,鼓励采用年龄验证技术保护儿童网络安全

2月25日,美国联邦贸易委员会发布政策声明,宣布该委员会将不会依据《儿童在线隐私保护规则》(COPPA规则)对特定网站及在线服务运营商采取执法行动——前提是这些运营商仅为通过年龄验证技术确定用户年龄而收集、使用及披露个人信息。COPPA规则要求面向13岁以下儿童的商业网站或在线服务运营商,以及实际知晓其正在收集儿童个人信息的运营商,须向家长告知其信息处理实践情况,并在收集、使用或披露13岁以下儿童个人信息前获得可验证的家长同意。

【参见:

https://www.ftc.gov/news-events/news/press-releases/2026/02/ftc-issues-coppa-policy-statement-incentivize-use-age-verification-technologies-protect-children】

 

FTC Issues COPPA Policy Statement to Incentivize the Use of Age Verification Technologies to Protect Children Online

On February 25, the Federal Trade Commission issued a policy statement announcing that the Commission will not bring an enforcement action under the Children’s Online Privacy Protection Rule (COPPA Rule) against certain website and online service operators that collect, use, and disclose personal information for the sole purpose of determining a user’s age via age verification technologies.The COPPA Rule requires operators of commercial websites or online services directed to children under 13, and operators with actual knowledge they are collecting personal information from a child, to provide notice of their information practices to parents and to obtain verifiable parental consent before collecting, using, or disclosing personal information collected from a child under 13.

[Reference:

https://www.ftc.gov/news-events/news/press-releases/2026/02/ftc-issues-coppa-policy-statement-incentivize-use-age-verification-technologies-protect-children]

 

2. Reddit因侵犯儿童隐私被罚款1447万英镑

2月24日,英国ICO宣布对Reddit 处以1447万英镑的罚款。经调查发现,Reddit公司未能实施任何可靠的年龄保证机制,没有合法依据处理13岁以下儿童的个人信息;且未能在2025年1月之前进行数据保护影响评估 (DPIA),以评估和减轻对儿童的风险。这意味着Reddit非法使用了儿童数据,可能使他们接触到不恰当和有害的内容。英国信息专员同时指出在保护儿童个人信息时,依赖用户自我声明存在风险,因为很容易被绕过。

【参见:

https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/reddit-issued-with-1447m-fine-for-children-s-privacy-failures/】

 

Reddit Fined £14.47 Million for Violating Children's Privacy

On February 24, the UK Information Commissioner's Office (ICO) announced a £14.47 million fine against Reddit. The investigation found that Reddit failed to apply any robust age assurance mechanism and therefore did not have a lawful basis for processing the personal information of children under the age of 13. Furthermore, it failed to carry out a data protection impact assessment (DPIA) to assess and mitigate risks to children before January 2025. These failures meant Reddit was using children’s data unlawfully, potentially exposing them to inappropriate and harmful content. The UK Information Commissioner also noted that relying on user self-declaration to protect children's personal information carries risks, as it can be easily circumvented.

[Reference:

https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/reddit-issued-with-1447m-fine-for-children-s-privacy-failures/]

 

3. 61家数据保护机构发布关于人工智能生成图像和隐私保护的联合声明

2月23日,全球各地61家数据保护机构发布了一份关于人工智能生成图像和隐私保护的联合声明。旨在回应人们对人工智能(AI)系统在未经当事人知情和同意的情况下生成可识别个人的逼真图像和视频的严重关切。签署方尤其关注此类系统可能对儿童造成的伤害。联合声明强调所有开发和使用人工智能内容生成系统的机构都应建立强有力的保障措施,防止个人信息被滥用及未经同意的私密影像等有害内容的生成(尤其涉及儿童时)。

【参见:

https://www.edps.europa.eu/data-protection/our-work/publications/international-conferences/2026-02-23-joint-statement-ai-generated-imagery-and-protection-privacy_en】

 

61 Data Protection Authorities Issue Joint Statement on AI-Generated Images and Privacy Protection

On February 23, 61 data protection authorities worldwide issued a joint statement on AI-Generated Imagery and the Protection of Privacy. This statement responds to serious concerns about AI systems generating hyper-realistic images and videos of identifiable individuals without their knowledge or consent. Signatories expressed particular concern about potential harm to children from such systems. The statement emphasizes that all entities developing or using AI content generation systems must implement robust safeguards to prevent misuse of personal information and the creation of harmful content—including non-consensual intimate images—especially when children are involved.

[Reference:

https://www.edps.europa.eu/data-protection/our-work/publications/international-conferences/2026-02-23-joint-statement-ai-generated-imagery-and-protection-privacy_en]