The Ministry of Industry and Information Technology has issued new regulations!
1. Background
The Ministry of Industry and Information Technology recently issued new network access requirements, clarifying app network access detection requirements specific changes, which mainly involve someapp权限调用，个人信息保护，软件升级以及敏感行为.
In order not to affect the normal operation of the app, relevant rectifications will be carried out in accordance with the documents of the Ministry of Industry and Information Technology. The following will elaborate on specific solution ideas from five directions.
2. Rectification
2.1 Protection of personal information
2.1.1 Basic mode (no permissions, no personal information acquisition mode)
The biggest point involved in this rectification isBasic mode. The basic mode refers to the pop-up window when the user selects the privacy agreement. You cannot click "disagree" to exit the application. Instead, you need to provide the user with a mode that does not have any permissions except the networking function, and does not require any personal information acquisition, and the user can use it normally.
This statement is a bit abstract. Let’s take a look at the cases that our friends have already done.
Tencent Video
Judging from腾讯视频的策略, for the first time a user uses the app, a "User Privacy Agreement" pop-up window will still pop up for the user to choose, but the difference is that,, the privacy agreement pop-up window will pop up again. After killing the process, entering it again will directly enter the basic mode. to enter a simple version of the page, which only provides some basic functions. When the user clicks , and the user clicks “不同意” button is replaced with “不同意并进入基本功能模式”“不同意并进入基本功能模式”“进入全功能模式”
NetEase Cloud Music
The product strategies of NetEase Cloud Music and Tencent Video are slightly different. When the user clicks on the first-level authorization pop-up window“不同意”, it will jump to the second-level authorization pop-up window. When the user clicks on the first-level authorization pop-up window, Click “不同意，进入基本功能模式” on the secondary pop-up window to enter the basic function page. Click “进入完整功能模式” on this page to return to the secondary authorization page. When the user kills the process and re-enters the app, he or she will still return to the first-level authorization page.
NetEase Cloud Music has one more pop-up window than Tencent Video. This is just to increase the probability of users entering the full mode and does not involve new regulations.
In addition, Bilibili, Kugou Music, etc. have already accessed the basic mode. Interested partners can download and experience it by themselves.
2.1.2 Privacy Policy Content
If an app reads and transmits users' personal information, it needs to check whether it has rules for collecting and using users' personal information, and clearly inform the purpose, method and scope of reading and transmitting personal information.
Determine whether the permissions include reading, modifying, and transmitting behaviors. If so, it needs to be clearly stated in the privacy agreement.
For example, if the app obtains a mobile phone number and saves it on the server, it needs to be clearly stated in the agreement:读取并传送用户手机号码.
2.2 app permission call
2.2.1 In-app permission call
2.2.1.1 Obtain location information and biometric information
When获取定位信息以及生物特征识别信息, the purpose of calling the permissions needs to be clearly stated to the user separately before calling the permissions. It cannot be replaced by a system permission pop-up window.
As shown in the picture above, to apply for location permission, a pop-up window needs to pop up for the user to choose before applying. The user can only apply for location permission after agreeing to the call.
2.2.1.2 Other permissions
Other permissions are the same as the privacy policy above. When calling, you need to declare whether it is reading, modifying, or transmitting, as shown below:
2.3 Application software upgrade
2.3.1 Update
应用软件或插件更新应在用户授权It cannot be updated directly, and users must be clearly informed that this behavior includes downloading and installation.
To put it simply, when the app is updated, a pop-up window needs to be used to inform the user whether to update the application. The user has the right to confirm the update, and the pop-up window needs to state that the update has two operations: downloading and installation. As shown below:
2.4 Application signature
Demand guarantee签名的真实有效性.