每周数据法律资讯 Data Law Weekly（20260511—20260517）

一

国内资讯（Domestic news）

1.公安部计算机信息系统安全产品质量监督检验中心检测发现41款违法违规收集使用个人信息的移动应用

5月14日，国家网络安全通报中心通报，经公安部计算机信息系统安全产品质量监督检验中心检测，41款移动应用存在违法违规收集使用个人信息行为，主要问题包括未公开收集使用规则、未经用户同意收集使用个人信息、未完整准确告知收集使用个人信息情况，或告知收集使用个人信息目的、方式、范围与实际收集使用情况不一致、强制用户同意收集非必要个人信息等11类违规情形。

【参见：

https://mp.weixin.qq.com/s/OTdm7faodcYhGkAJpRHQQQ】

Quality Supervision and Inspection Center for Computer Information System Security Products of the Ministry of Public Security Identifies 41 Mobile Applications Illegally Collecting and Using Personal Information

On May 14, the National Cyber Security Notification Center issued a notice stating that, according to testing conducted by the Quality Supervision and Inspection Center for Computer Information System Security Products of the Ministry of Public Security, 41 mobile applications were found to have illegally collected and used personal information. The major issues included failure to disclose rules for collection and use, collection and use of personal information without user consent, failure to fully and accurately inform users of personal information collection practices, inconsistencies between disclosed and actual collection purposes, methods and scope, and forcing users to consent to the collection of unnecessary personal information, among 11 categories of violations.

[Reference: 

https://mp.weixin.qq.com/s/OTdm7faodcYhGkAJpRHQQQ]

2.网信办发布2026年3月至4月生成式人工智能服务备案信息公告

5月13日，网信办发布公告，2026年3月至4月新增72款生成式人工智能服务在国家网信办完成备案，对于通过API接口或其他方式直接调用已备案模型能力的生成式人工智能应用或功能，由地方网信办开展登记，新增49款完成登记。截至4月30日，累计有868款生成式人工智能服务完成备案，530款生成式人工智能应用或功能完成登记。

【参见：

https://mp.weixin.qq.com/s/sCahZbkFHR63XubkWx7TqA】
 

CAC Releases Filing Information Announcement for Generative AI Services from March to April 2026

On May 13, the CAC issued an announcement stating that 72 new generative AI services completed filing procedures with the CAC between March and April 2026. For generative AI applications or functions that directly invoke the capabilities of already-filed models through APIs or other means, local cyberspace administrations carried out registration procedures, with 49 additional applications completing registration. As of April 30, a total of 868 generative AI services had completed filing procedures, while 530 generative AI applications or functions had completed registration.

[Reference:

https://mp.weixin.qq.com/s/sCahZbkFHR63XubkWx7TqA]

3.网信办发布第二十三批境内区块链信息服务备案编号

5月12日，网信办发布第二十三批境内区块链信息服务备案编号，本批共33个境内区块链信息服务完成备案。根据《区块链信息服务管理规定》第十一条规定，区块链信息服务提供者应当在提供服务之日起十个工作日内通过国家互联网信息办公室区块链信息服务备案管理系统填报服务提供者的名称、服务类别、服务形式、应用领域、服务器地址等信息，履行备案手续。

【点击查阅备案清单：

https://www.cac.gov.cn/2026-05/12/c_1780238108726841.htm】

CAC Releases the 23rd Batch of Domestic Blockchain Information Service Filing Numbers

On May 12, the CAC released the 23rd batch of domestic blockchain information service filing numbers, with a total of 33 domestic blockchain information services completing filing procedures in this batch.According to Article 11 of the “Regulations on the Administration of Blockchain Information Services,” blockchain information service providers shall, within ten working days from the date of service provision, submit information such as the provider’s name, service category, service format, application field, and server address through the Cyberspace Administration of China’s Blockchain Information Service Filing Management System to complete the filing procedures.

[Click to view the filing list：

https://www.cac.gov.cn/2026-05/12/c_1780238108726841.htm]

4.国务院办公厅印发《国务院2026年度立法工作计划》

5月11日，国务院办公厅印发《国务院2026年度立法工作计划》，明确提出完善人工智能治理，加快推进人工智能健康发展综合性立法；加快完善保障数据、算力、算法、产权、网络安全、供应链安全等人工智能共性要素及规范重点应用场景方面的立法。

【参见：

https://mp.weixin.qq.com/s/CcE8cnMaOJFnbszYp1Vk-w】

General Office of the State Council Issues the 2026 Legislative Work Plan of the State Council

On May 11, the General Office of the State Council issued the “2026 Legislative Work Plan of the State Council”, proposing to improve AI governance and accelerate comprehensive legislation promoting the healthy development of AI. The plan also calls for accelerating legislation concerning key AI-related elements, including data, computing power, algorithms, intellectual property, cybersecurity and supply chain security, as well as legislation regulating key application scenarios.

[Reference: 

https://mp.weixin.qq.com/s/CcE8cnMaOJFnbszYp1Vk-w]

5.网信办全面部署推进规范短视频内容标注工作

近日，网信办总结12家平台试行经验，指导各地各网站平台全面推进落实三项工作：一是规范短视频内容标注标签，明确网站平台必须为用户提供6类“必选标签”，并可根据自身实际提供其他“可选标签”。二是将内容标注设为短视频发布必经环节，发布者必须从“必选标签”中选择一项，才能发布短视频。三是对新增短视频标注情况加强审核，对存量短视频进行分批回溯，对未规范标注的，进行补标或纠正，并对相关发布者进行教育警示，推动实现短视频内容应标尽标。

【参见：

https://mp.weixin.qq.com/s/i3nBVPu2roKhg2sGNqkymA】

CAC Fully Deploys and Advances Standardised Short Video Content Labelling Work

Recently, the CAC summarised pilot experiences from 12 platforms and instructed local authorities and online platforms to comprehensively implement three tasks: firstly, to standardise short video content labels by requiring platforms to provide six categories of “mandatory labels” while allowing additional optional labels based on actual needs; secondly, to make content labelling a mandatory step in the short video publishing process, requiring publishers to select one mandatory label before publication; and thirdly, to strengthen reviews of newly uploaded short videos and conduct phased retrospective reviews of existing content, requiring supplementary or corrective labelling for non-compliant content and issuing education and warnings to relevant publishers to ensure that all applicable short video content is properly labelled.

[Reference:

https://mp.weixin.qq.com/s/i3nBVPu2roKhg2sGNqkymA]

二

国外资讯（Overseas news）

1.澳大利亚信息专员办公室更新《澳大利亚隐私原则》第3条款指导文件

5月13日，澳大利亚信息专员办公室（OAIC）宣布更新了关于澳大利亚隐私原则（APP）第3条款（收集主动提供的个人信息）的指导。本次更新在原有规则基础上扩充内容，明确“合理必要收集”“合法公平收集方式”等核心认定标准，并新增人工智能、面部识别、数据抓取、追踪像素、数据中介等新技术场景下的适用示例，帮助相关主体更好遵守隐私合规要求。

【参见：

https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-3-app-3-collection-of-solicited-personal-information】

OAIC Updates Guidance on APP 3 of the Australian Privacy Principles

On May 13, the Office of the Australian Information Commissioner (OAIC) announced updates to its guidance on Australian Privacy Principle (APP) 3 concerning the collection of solicited personal information. The update expands upon the existing framework by clarifying key standards relating to “reasonably necessary collection” and “lawful and fair means of collection”, and introduces new examples addressing emerging technology scenarios such as artificial intelligence, facial recognition, data scraping, tracking pixels and data brokerage practices, with the aim of assisting relevant entities in better complying with privacy obligations.

[Reference:

https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-3-app-3-collection-of-solicited-personal-information]

2.孟加拉国颁布《2026年个人数据保护法》

近日，孟加拉国议会颁布了《2026年个人数据保护法》（2026年第63号法案），并废除了《2025年个人数据保护条例》以及《2026年个人数据保护（修订）条例》（2026年第23号条例）。该法规定了其适用范围、数据控制者和处理者的义务以及数据主体享有的权利等内容。该法案应视为于2025年11月6日生效，但第23条及第31至35条除外，该等条款应自该法案颁布之日起18个月后生效，具体生效日期由政府通过在《政府公报》上发布通知予以指定。

【参见：

bdlaws.minlaw.gov.bd/act-print-1692.html】
 

Bangladesh Enacts the Personal Data Protection Act, 2026

Recently, the Parliament of Bangladesh enacted the Personal Data Protection Act, 2026 (Act No. 63 of 2026) and repealed the Personal Data Protection Ordinance, 2025, as well as the Personal Data Protection (Amendment) Ordinance, 2026 (Ordinance No. 23 of 2026). The Act sets forth its scope of application, the obligations of data controllers and processors, and the rights of data subjects. The Act shall be deemed to have come into force on November 6, 2025, except for Sections 23 and 31 to 35, which shall come into force 18 months after the date of enactment of the Act; the specific effective date shall be designated by the Government through a notice published in the Government Gazette.

[Reference:

bdlaws.minlaw.gov.bd/act-print-1692.html]