每周数据法律资讯 Data Law Weekly（20260302—20260308）

1.  上海市通信管理局发布关于侵害用户权益行为APP（SDK）的通报（2026年第一批）

3月6日，上海市通信管理局发布关于侵害用户权益行为APP（SDK）的通报（2026年第一批），上海通管局组织第三方检测机构对上海市APP（SDK）进行抽查，共发现14款APP（SDK）存在侵害用户权益行为，所涉问题包括未明示个人信息处理规则、未妥善处理用户投诉、超范围收集个人信息等。

【参见：

https://mp.weixin.qq.com/s/CnnqMX2Og6ANTMBnmJrltA】

Shanghai Communications Administration Issues Notice on Apps (SDKs) Violating User Rights (First Batch of 2026)

On March 6, the Shanghai Communications Administration issued its first batch of 2026 notifications regarding apps (SDKs) infringing upon user rights. The agency organized third-party testing institutions to conduct random inspections of Shanghai-based apps (SDKs), identifying 14 apps (SDKs) engaging in such violations. Issues included failure to clearly disclose personal information processing rules, inadequate handling of user complaints, and excessive collection of personal information beyond necessary scope.

[Reference:

https://mp.weixin.qq.com/s/CnnqMX2Og6ANTMBnmJrltA]

2. 国家网信办完成第一批政务移动互联网应用程序备案

3月3日，国家网信办依据《政务移动互联网应用程序备案工作指南（第一版）》完成第一批政务移动互联网应用程序备案，备案覆盖“国家政务服务平台”“人民法院调解平台”等52款政务应用。明确政务App上线前必须完成备案，严禁以任何形式要求用户下载、安装、使用未备案政务应用；备案信息向社会公开，接受监督，未备案政务应用不得提供。

【参见：

https://mp.weixin.qq.com/s/IPhQtRZ4it-H9sl_EfkHYA】

Cyberspace Administration of China Completes First Batch of Filings for Government Mobile Internet Applications

On March 3, the Cyberspace Administration of China (CAC) completed the first batch of filings for government mobile internet applications in accordance with the Guidelines for the Filing of Government Mobile Internet Applications (First Edition), covering 52 government applications such as the “National Government Service Platform” and the “People's Court Mediation Platform”. It clarifies that government apps must complete filing before launch, and it is strictly prohibited to require users to download, install, or use unfiled government apps in any form. Filing information is disclosed to the public for supervision, and unfiled government apps shall not be provided.

[Reference:

https://mp.weixin.qq.com/s/IPhQtRZ4it-H9sl_EfkHYA]

3. 全国网络安全标准化技术委员会发布《网络安全标准实践指南——网络安全标识消费类网联摄像头安全要求（征求意见稿）》

3月3日，全国网络安全标准化技术委员会发布《网络安全标准实践指南——网络安全标识消费类网联摄像头安全要求（征求意见稿）》。文件旨在落实《网络安全标识管理办法》，提升消费类网联摄像头网络安全能力，规范产品安全设计、研发、检测与认证要求，明确数据安全、个人信息保护、身份认证、访问控制、漏洞管理等核心安全要求。

【参见：

https://www.tc260.org.cn/portal/article/2/adddb0286f874a5fb6de5b1c39cb1ad3?isPreview=true&sessionid=】

National Technical Committee 260 on Cybersecurity Releases ‘the Practice Guide for Cybersecurity Standards—Cybersecurity Labeling: Security Requirements for Consumer Network-Connected Cameras (Draft for Comment)’

On March 3, the National Technical Committee 260 on Cybersecurity (TC260) released ‘the Practice Guide for Cybersecurity Standards—Cybersecurity Labeling: Security Requirements for Consumer Network-Connected Cameras (Draft for Comment)’. The document aims to implement ‘the Measures for the Administration of Cybersecurity Labeling’, enhance the cybersecurity capabilities of consumer network-connected cameras, standardize product security design, research and development, testing and certification requirements, and clarify core security requirements such as data security, personal information protection, identity authentication, access control, and vulnerability management.

[Reference: 

https://www.tc260.org.cn/portal/article/2/adddb0286f874a5fb6de5b1c39cb1ad3?isPreview=true&sessionid=]

4. 最高人民法院发布依法惩治网络暴力违法犯罪典型案例

3月3日，最高人民法院发布5件依法惩治网络暴力违法犯罪典型案例，其中明确个人信息相关核心要点：以“开盒”“人肉搜索”等方式非法获取并曝光他人个人信息，用于实施诽谤等网暴行为的，以侵犯公民个人信息罪定罪处罚；即使涉案个人信息数量未达传统标准，若造成恶劣社会影响（如影响被害人正常生活、引发群体恐慌等），仍可依法追究刑事责任，强化公民个人信息司法保护力度。

【参见：

https://www.court.gov.cn/zixun/xiangqing/490901.html?sessionid=】

Supreme People’s Court Releases Typical Cases of Punishing Illegal and Criminal Acts of Cyber Violence in Accordance with the Law

On March 3, the Supreme People’s Court released 5 typical cases of punishing illegal and criminal acts of cyber violence in accordance with the law, which clarify the core points related to personal information: illegally obtaining and disclosing others’ personal information by means such as “unboxing” and “doxxing” to carry out cyber violence such as defamation shall be convicted and punished for the crime of infringing on citizens’ personal information. Even if the amount of personal information involved does not meet the traditional standards, criminal responsibility can still be pursued in accordance with the law if it causes bad social impacts (such as affecting the normal life of the victim, causing group panic, etc.), so as to strengthen the judicial protection of citizens’ personal information.

[Reference: 

https://www.court.gov.cn/zixun/xiangqing/490901.html?sessionid=]

1. 印尼宣布将限制16岁以下儿童使用社交媒体

3月6日，印尼通信和数字事务部表示，印尼将限制16岁以下儿童访问社交媒体平台，从3月28日起，16岁以下儿童在“高风险平台”上拥有的账户将逐步停用，这些平台包括TikTok、Facebook、Instagram和Roblox，直到这些平台都履行其合规义务为止。

【参见：

https://www.reuters.com/sustainability/society-equity/indonesia-restrict-social-media-access-children-under-16-minister-says-2026-03-06/】

Indonesia Announces Restrictions on Social Media Use for Children Under 16

On March 6, Indonesia's Ministry of Communication and Digital stated that the country will restrict children under 16 from accessing social media platforms. Starting March 28, accounts held by minors on “high-risk platforms”—including TikTok, Facebook, Instagram, and Roblox—will be gradually deactivated until these platforms fulfill their compliance obligations.

[Reference:

https://www.reuters.com/sustainability/society-equity/indonesia-restrict-social-media-access-children-under-16-minister-says-2026-03-06/]

2. 越南《人工智能法》正式生效

3月1日，越南《人工智能法》正式生效。该法全面规范人工智能活动，明确界定人工智能系统、开发者、提供商、部署者、用户及受影响人员等关键术语；针对高风险人工智能系统，要求开展符合性评估、隐私与权益影响评估，并严禁非法使用；明确执法规则，违规行为将依法承担行政处罚、刑事责任及损害赔偿责任。

【点击查阅越南《人工智能法》全文：

https://vanban.chinhphu.vn/?classid=1&docid=216334&pageid=27160&typegroupid=3】

Vietnam's Artificial Intelligence Law Officially Takes Effect

On March 1, Vietnam's Artificial Intelligence Law officially took effect. This legislation comprehensively regulates AI activities, clearly defining key terms such as AI systems, developers, providers, deployers, users, and affected individuals. For high-risk AI systems, it mandates compliance assessments and privacy/rights impact assessments while strictly prohibiting illegal use. The law also establishes enforcement rules, stipulating that violations will incur administrative penalties, criminal liability, and compensation for damages.

[Click to view the full text of Vietnam's Artificial Intelligence Law:

https://vanban.chinhphu.vn/?classid=1&docid=216334&pageid=27160&typegroupid=3]