每周数据法律资讯 Data Law Weekly（20250616-20250622）

1. 北京市开展民生消费领域数据安全和个人信息保护专项整治

6月21日，北京市网信办通报，联合市场监管、公安、政数、通管，以及教育、住建、交通、商务、文旅、卫健、体育等行业主管部门，聚焦智慧停车、线上点餐、运动健身、酒店住宿、线上诊疗、少儿培训、房产中介、租借充电宝、生活服务（洗衣、理发）、电影购票、网上加油等11个民生消费领域经营主体自主或委托建设运维的应用程序，开展了数据安全和个人信息保护专项整治。此次专项整治覆盖全市各类经营主体（服务商）5万余家，随机抽取197款应用程序进行远程技术检测，发现并督导整改未公开收集使用规则、未征得用户同意收集个人信息、传输通道认证授权机制不完善等各类问题388个。通报中还附上了《民生消费领域数据安全和个人信息保护自查清单》。

【参见：

https://mp.weixin.qq.com/s/6dgG7dzrS0G0H-odIpKWUw】

Beijing launched special campaign to ensure data security and personal information protection in the field of people's livelihood and consumption

On June 21, the Beijing Cyberspace Administration announced that it had joined forces with market supervision, public security, government data, communication management, as well as industry regulatory departments such as education, housing and construction, transportation, business, culture and tourism, health, and sports, to focus on the construction and operation of applications independently or commissioned by 11 operating entities in the field of people's livelihood consumption, including smart parking, online ordering, sports and fitness, hotel accommodation, online diagnosis and treatment, children's training, real estate agencies, rental power banks, life services (laundry, hairdressing), movie ticket purchasing, online refueling, etc., to carry out special rectification of data security and personal information protection. The special campaign covered more than 50,000 business entities (service providers) across the city, randomly selected 197 applications for remote technical inspections, and identified and supervised the rectification of 388 issues, including failure to publicly disclose rules for the collection and use of personal information, failure to obtain user consent for the collection of personal information, and incomplete authentication and authorization mechanisms for transmission channels. The report also included a “Self-inspection Checklist for Data Security and Personal Information Protection in the Public Welfare and Consumer Services Sector”.

[Reference:

https://mp.weixin.qq.com/s/6dgG7dzrS0G0H-odIpKWUw]

2. 中央网信办发布《可能影响未成年人身心健康的网络信息分类办法（征求意见稿）》

6月20日，中央网信办发布《可能影响未成年人身心健康的网络信息分类办法（征求意见稿）》，面向社会公开征求意见。《办法》作为《未成年人网络保护条例》的配套文件，旨在细化《条例》第23条可能影响未成年人身心健康的信息的具体种类、范围、判断标准和提示办法，进一步健全完善未成年人网络保护制度，营造有利于未成年人身心健康的网络环境。《办法》将可能影响未成年人身心健康的信息分为可能引发或者诱导未成年人模仿或实施不良行为的信息、可能对未成年人价值观造成负面影响的信息、不当使用未成年人形象的信息、诱导未成年人沉迷网络的信息等。《办法》规定，应对不良信息采取防范和抵制措施，避免影响未成年人身心健康；或按照要求在信息展示前，在显著位置作出明显提示。

【参见：

https://mp.weixin.qq.com/s/zFCUjAQBmy2MEDYRuhQ6BA】

The CAC issued the “Measures for the Classification of Online Information that May Affect the Mental and Physical Health of Minors (Draft for Public Comment)”《可能影响未成年人身心健康的网络信息分类办法（征求意见稿）》

On June 20, the Cyberspace Administration of China (CAC) issued the “Measures for the Classification of Online Information that May Affect the Mental and Physical Health of Minors (Draft for Public Comment)”. The Measures, as a supporting document to the “Regulations on the Protection of Minors Online”《未成年人网络保护条例》, aim to specify the specific types, scope, criteria for determination, and notification methods for information that may affect the mental and physical health of minors as stipulated in Article 23 of the Regulations, further improve the system for protecting minors online, and create a network environment conducive to the mental and physical health of minors. The Measures classify information that may affect the mental and physical health of minors into the following categories: information that may induce or encourage minors to imitate or engage in harmful behaviors; information that may have a negative impact on the values of minors; information that improperly uses the images of minors; and information that may induce minors to become addicted to the internet. The Measures stipulate that preventive and countermeasures should be taken against harmful information to avoid affecting the mental and physical health of minors; or, in accordance with requirements, prominent warnings should be displayed in a conspicuous location before the information is displayed.

[Reference:

https://mp.weixin.qq.com/s/zFCUjAQBmy2MEDYRuhQ6BA]

3. 中央网信办发布“清朗·整治AI技术滥用”专项行动第一阶段工作进展

6月20日，中央网信办发布“清朗·整治AI技术滥用”专项行动第一阶段工作进展。专项行动自2025年4月启动以来，中央网信办聚焦AI换脸拟声侵犯公众权益、AI内容标识缺失误导公众等AI技术滥用乱象，深入推进第一阶段重点整治任务。第一阶段累计处置违规小程序、应用程序、智能体等AI产品3500余款，清理违法违规信息96万余条，处置账号3700余个，各项工作取得积极进展。下一步，中央网信办将聚焦AI造谣、低俗内容等7类突出问题，开展“清朗·整治AI技术滥用”专项行动第二阶段工作。

【参见：

https://mp.weixin.qq.com/s/Kfckz8Lx1O-S1Atr5HvwtA】

The CAC announced the progress of the first phase of the “Qinglang · Crackdown on the Abuse of AI Technology” special campaign

On June 20, the CAC announced the progress of the first phase of the “Qinglang · Crackdown on the Abuse of AI Technology” special campaign. Since the campaign was launched in April 2025, the CAC has focused on addressing issues such as AI-powered face swapping and voice cloning that infringe upon public rights, as well as the absence of proper labeling for AI-generated content that misleads the public. During the first phase, over 3,500 AI products, including small programs, applications, and intelligent agents, were addressed for violations, over 960,000 pieces of illegal and non-compliant information were cleared, and over 3,700 accounts were handled. Significant progress has been made in all aspects of the work. Moving forward, the CAC will target seven prominent issues, including AI-generated rumors and vulgar content, and launch the second phase of the “Qinglang · Crackdown on the Abuse of AI Technology” special campaign.

[Reference:

https://mp.weixin.qq.com/s/Kfckz8Lx1O-S1Atr5HvwtA]

4. 筑梦岛APP因AI智能体对话存在低俗擦边内容被上海网信办依法约谈

近期有媒体报道，筑梦岛APP 等AI聊天软件存在虚拟角色互动生成低俗内容等问题，经核实，该平台AI智能体内容生成环节存在低俗擦边等违规内容，危害未成年人身心健康。6月19日，上海市网信办依法约谈筑梦岛APP运营企业主要负责人，要求平台立即整改，健全AI生成合成内容审核机制，提升技术把关能力，加强涉未成年人不良内容的整治清理，切实落实未成年人网络保护义务。

【参见：

https://mp.weixin.qq.com/s/X9cFX9Eaw0BLbMdxV9GbKg】

The Zhumengdao APP was legally summoned by the Shanghai Cyberspace Administration for containing vulgar and inappropriate content in its AI-powered chatbot conversations

Recently, media reports indicated that the Zhumengdao APP and other AI chat apps contained vulgar content generated through virtual character interactions. Upon verification, it was found that the AI-powered content generation process on the platform contained vulgar and inappropriate content, posing a threat to the mental and physical health of minors. On June 19, the Shanghai Cyberspace Administration legally summoned the main responsible person of the Zhumengdao APP's operating company, requiring the platform to immediately rectify the issues, establish a robust review mechanism for AI-generated and synthesized content, enhance technical oversight capabilities, strengthen the cleanup of harmful content targeting minors, and effectively fulfill its obligations to protect minors online. 

[Reference:

https://mp.weixin.qq.com/s/X9cFX9Eaw0BLbMdxV9GbKg]

5. 国家网络与信息安全信息通报中心通报64款违法违规收集使用个人信息的移动应用

6月18日，国家网络与信息安全信息通报中心通报64款违法违规收集使用个人信息的移动应用。这些移动应用存在的问题包括：在App首次运行时未通过弹窗等明显方式提示用户阅读隐私政策等收集使用规则；在处理个人信息前，未以显著方式、清晰易懂的语言真实、准确、完整地向个人告知个人信息处理者的名称或者姓名、联系方式、个人信息的保存期限等；隐私政策未逐一列出App收集使用个人信息的目的、方式、范围等；向其他个人信息处理者提供其处理的个人信息未向个人告知并取得个人的单独同意；未在征得用户同意后才开始收集个人信息；未提供有效的更正、删除个人信息及注销用户账号功能；未提供便捷的撤回同意的方式；处理敏感个人信息未取得个人的单独同意；未采取相应的加密、去标识化等安全技术措施等。

【参见：

https://mp.weixin.qq.com/s/O24Dzig5tAfVS0fakvq8nw】

The National Network and Information Security Information Report Centre reported 64 mobile applications for illegally collecting and using personal information

On June 18, the National Network and Information Security Information Report Centre reported 64 mobile applications for illegally collecting and using personal information. The issues identified in these mobile applications include: failing to prompt users to read privacy policies or other rules regarding the collection and use of personal information through prominent pop-up windows or other obvious means during the first run of the app; failing to inform individuals in a prominent, clear, and understandable manner about the name or title of the personal information processor, contact information, and the retention period for personal information prior to processing such information; failing to list in detail the purposes, methods, and scope of personal information collection and use in the privacy policy; Providing personal information processed by other personal information processors to such processors without informing individuals and obtaining their separate consent; beginning to collect personal information without obtaining user consent; failing to provide effective functions for correcting, deleting personal information, and canceling user accounts; failing to provide convenient means for withdrawing consent; processing sensitive personal information without obtaining separate consent from individuals; and failing to adopt corresponding security technical measures such as encryption and de-identification.

[Reference:

https://mp.weixin.qq.com/s/O24Dzig5tAfVS0fakvq8nw]

6. 全国已有433款大模型完成备案

记者从6月18日开幕的2025年世界移动通信大会（上海）（MWC上海2025）上获悉，截至目前，中国已经有433款大模型完成备案，上线提供服务。相关部门、业内企业将坚持发展与安全并重，加快前沿技术攻关，促进人工智能科技创新与产业创新深度融合、推动人工智能健康有序发展。

【参见：

https://www.jjckb.cn/20250619/228b478a98df4a44b726055bdd8c3566/c.html】

A total of 433 large-scale models have been filed nationwide

According to information obtained by reporters at the 2025 Mobile World Congress (Shanghai) (MWC Shanghai 2025), which opened on June 18, as of now, a total of 433 large-scale models have been filed in China and are now online and providing services. Relevant departments and industry enterprises will adhere to the principle of balancing development and security, accelerate breakthroughs in cutting-edge technologies, promote the deep integration of artificial intelligence science and technology innovation with industrial innovation, and drive the healthy and orderly development of artificial intelligence.

[Reference: 

https://www.jjckb.cn/20250619/228b478a98df4a44b726055bdd8c3566/c.html]

7. 最高人民法院发布网络消费民事典型案例：自动勾选“已阅读并同意隐私政策”选项应当承担侵权责任

6月16日，最高人民法院发布五个网络消费民事典型案例。其中，案例5“网络服务提供者过度收集消费者个人信息，应承担侵权责任——马某与某公司个人信息保护纠纷案”涉及个人信息保护。该案中法院认为，网络服务提供者应基于个人同意处理个人信息，其预先拟定的有关个人信息收集和使用的协议应使个人充分知情，并自愿、明确作出同意。该APP的基本功能为词汇查询，用户的手机号码并非使用词汇查询功能所必需的信息，故某公司存在过度收集用户信息的行为。APP自动为用户勾选同意隐私政策，未依法保障用户在充分知情的情况下自主作出同意；其在用户拒绝同意隐私政策的情况下直接退出，不提供查词服务，属于拒绝提供基本服务；其未向用户提供便捷的撤回同意的方式。某公司的上述行为违反《中华人民共和国个人信息保护法》第十五条、第十六条规定，构成对马某个人信息权益的侵害。

【参见：

https://mp.weixin.qq.com/s/cvrNcOuWbFv9QcRfqXREyQ】

The Supreme People's Court released typical civil cases of online consumption: automatic selection of the "read and agree to privacy policy" option should bear tort liability

On June 16, the Supreme People's Court released five typical civil cases of online consumption. Among them, Case 5 "Network service providers excessively collect consumers' personal information and should bear tort liability - the personal information protection dispute case between Ma and a certain company" involves personal information protection. In this case, the court held that internet service providers should process personal information based on individual consent, and their pre drafted agreements regarding the collection and use of personal information should enable individuals to be fully informed and voluntarily and explicitly consent. The basic function of this App is vocabulary search, and the user's phone number is not necessary information for using the vocabulary search function, so that certain company has the behavior of excessively collecting user information. The App automatically selected the consent privacy policy for the user, without legally protecting the user's independent consent with full knowledge; If the user refuses to agree to the privacy policy and directly exits without providing keyword search services, it is considered a refusal to provide basic services; It did not provide users with a convenient way to withdraw their consent. The above-mentioned behavior of that certain company violates Article 15 and Article 16 of the Personal Information Protection Law of the People's Republic of China, constituting an infringement of Ma's personal information rights and interests.

[Reference:

https://mp.weixin.qq.com/s/cvrNcOuWbFv9QcRfqXREyQ]

1.法国CNIL发布关于基于合法利益基础开发AI系统的指南

6月19日，法国国家信息与自由委员会（CNIL）发布了实践指南《人工智能：使用合法利益作为开发人工智能系统的合法性基础》和《合法利益：关于数据抓取（网络爬虫）时需采取的措施的专项说明》。指南明确了在何种条件下可以依赖合法利益开发人工智能系统，特别是在数据抓取（网络爬虫）的情况下。指南规定，使用合法利益需满足以下三个条件：机构追求的利益必须是“合法的”；计划中的数据处理必须符合“必要性”条件；数据处理不应给被处理数据的个人的权利和利益带来不成比例的影响，同时需考虑其合理期待。因此，必须根据具体实施条件进行“利益平衡”分析。

【参见：

https://www.cnil.fr/fr/base-legale-interet-legitime-developpement-systeme】

French CNIL issued guidelines on developing AI systems based on legitimate interests

On June 19, the French National Commission on Informatics and Liberties (CNIL) published two practical guides: “AI: Using Legitimate Interests as a Legal Basis for Developing Artificial Intelligence Systems” and “Legitimate Interests: Specific Measures to Be Taken When Data Scraping (Web Crawling) Is Involved”. The guidelines clarify the conditions under which legitimate interests may be relied upon to develop AI systems, particularly in the context of data scraping (web scraping). The guidelines stipulate that the use of legitimate interests must meet the following three conditions: The interests pursued by the organization must be “legitimate”; The planned data processing must meet the “necessity” condition; Data processing must not result in a disproportionate impact on the rights and interests of the individuals whose data is being processed, while also taking into account their reasonable expectations. Therefore, a “balancing of interests” analysis must be conducted based on the specific implementation conditions.

[Reference:

https://www.cnil.fr/fr/base-legale-interet-legitime-developpement-systeme]

2. 意大利竞争和市场管理局对DeepSeek涉嫌不当商业行为发起调查

6月16日，意大利竞争和市场管理局（AGCM）发布对DeepSeek幻觉信息的调查通知。AGCM 认为DeepSeek未以足够清晰、及时和易于理解的方式告知用户，其AI模型可能会出现所谓的“幻觉”信息：即在用户输入特定数据时，AI模型可能会生成包含不准确、误导性或虚构信息的一个或多个输出结果。特别是，在使用DeepSeek的AI模型时，弹出的对话框中没有任何关于可能出现“幻觉”的免责声明或警告。该等行为可能构成违反意大利《消费法》规定的不当商业行为。AGCM宣布对DeepSeek启动调查程序，并要求DeepSeek提供有关其AI服务的信息，包括在意大利提供的所有AI服务的完整列表、在意大利推广/传播其AI服务的方式、公司企业集团结构等。

【参见：

https://www.agcm.it/dotcmsdoc/bollettini/2025/23-25.pdf】