Shulou(Shulou.com)06/01 Report--

At the third press conference held by the legal staff of the standing Committee of the National people's Congress on December 20, 2019, spokesman Yue Zhongming revealed that the legislation of the personal Information Protection Law would be included in the plan next year. The forthcoming personal Information Protection Law will be used together with the password Law of the people's Republic of China, which came into effect on January 1, 2020, as the legal basis for information security to protect the personal information security of citizens.

The leakage of personal information has attracted more and more attention.

1.APP collects personal information illegally

With the rapid development of the mobile Internet era, the use of APP has become a necessity in people's life. These APP make our life more convenient, but they are also the "culprit" of personal information leakage. According to the "App personal Information Disclosure Survey report" released by the China Consumer Association on August 29th, 2018, more than 80% of the respondents have had personal information disclosure; the data in the "report on personal Information Collection and Privacy Policy Evaluation of App" released on November 28, 2018 shows that as many as 91 of the 100 app have excessive collection of users' personal information.

Nowadays, the leakage of personal information is so serious that it threatens the safety of personal assets to a great extent. The risk of information security is becoming increasingly prominent, so the legislation of personal information protection law is of great significance.

2. Data leakage is very popular on all major websites and platforms.

According to the data in the 44th Statistical report on the Development of China's Internet published by the China Internet Network Information Center (CNNIC), 44.4% of netizens encountered network security problems in the first half of 2019. Smart speakers, portable battery, surveillance cameras … These common things can steal our privacy.

Illegal elements through illegal means to enter the major website platforms to steal user information, including account passwords, photos, videos and other private data, lawbreakers will also use the obtained trade secret documents to make a profit.

In recent years, incidents with serious consequences caused by information leakage have emerged one after another. In 2016, Yahoo announced that the personal information of 1.5 billion users had been leaked between 2013 and 2014. The incident directly caused Yahoo's share price to fall by more than 6%, and eventually led to the acquisition of Yahoo's core Internet business and the collapse of the once-huge Internet empire. In China, user information has been leaked more than 12306 times, and account number, password, ID card, mailbox and other information are spread on the Internet at will. This year, Facebook was again involved in the leak scandal after being fined $5 billion for privacy breaches. Wait a minute.

Protecting the security of personal information requires the joint efforts of all parties

Nowadays, the phenomenon of illegal collection and embezzlement of personal information emerges one after another. in addition to relying on the legislation of the future personal information protection law, enterprises and users should also strengthen information security protection, cultivate information security awareness and enhance vigilance.

1. Enterprises should strengthen the protection of website data security

In addition to the conventional means of security protection such as firewall, DDoS protection and malware detection, attention should also be paid to data security and encryption. Today, most corporate websites use the insecure http protocol, while http is a protocol that does not provide any data encryption. The data transfer between Web browsers and Web servers uses plaintext that anyone can recognize, which is equivalent to "streaking" on the Internet.

In order to solve this security defect, in 1994, Netscape designed secure socket layer SSL protocol, SSL and its successor transport layer security TLS two major encryption protocols to protect the security of all communications on the Internet. SSL/TLS can establish a secure channel between Web browser and Web server, encrypt the transmitted data, ensure that the data is not eavesdropped and leaked during transmission, and ensure the security and integrity of the data. Adding SSL/TLS to HTTP protocol is the hypertext transmission security protocol https, which has become one of the most effective website security solutions.

The SSL certificate can upgrade the insecure HTTP protocol to the HTTPS protocol for encrypted transmission. At present, the most popular SSL certificate brands in the world are Symantec, Geotrust, Comodo, Thawte and RapidSSL. You can learn about these certificate brands and their related information on Anxin certificate.

two。 Individuals should develop awareness of information security protection.

Each of us should cultivate the awareness of protecting the security of private information: links of unknown origin are not important, especially those in text messages and emails; phone calls involving privacy and property must check information and do not be fooled; surfing the Internet should be careful, remove browsing traces in time, fill in personal information carefully, and do not easily scan QR codes. Do not discard express takeout orders at will, do not forget to erase personal information; try not to use WiFi in public places, and pay attention to turn off the automatic connection WiFi function.

It is everyone's responsibility to protect information security. Let's look forward to the advent of the personal Information Protection Law and jointly protect our personal information security.

Disclaimer: this article is originally published by Anxin Certificate, and the content shall not be reproduced without permission!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.