In January 2024, the Communications Administration Bureau of the Ministry of Industry and Information Technology announced the list of outstanding cases for improving mobile Internet application service capabilities in 2023. "iQiyi's proactive compliance risk disposal platform - covering risk monitoring and disposal of the entire APP business process" and "iQiyi's full life cycle privacy protection plan" were respectively selected for "Improving systems and procedures and strengthening full-process compliance management" and outstanding cases in the field of “research, development and deployment of technical means to enhance risk prevention capabilities”. Companies selected as outstanding cases during the same period include Huawei, China Mobile, etc.
It is reported that the purpose of this selection by the Ministry of Industry and Information Technology is to recommend advanced experiences and practices of enterprises, promote the improvement of full-process service perception and full-chain management capabilities of mobile Internet applications, create a good environment of striving for excellence, mutual promotion and mutual advancement, and provide a demonstration for high-quality development of the industry. guidance. According to the selection rules, the selected cases mainly examine 10 requirements in three aspects: optimizing service experience, strengthening management capabilities, and building industry ecology. The evaluation is based on the three basic requirements of being objective and truthful, leading by innovation, and being effective. The selection of iQiyi's two solutions also reflects the Ministry of Industry and Information Technology's recognition of the iQiyi platform's compliance level and user privacy protection capabilities.
As the leading online audio-visual platform in China, iQiyi serves hundreds of millions of users every day.
Providing users with a safe and reliable audio and video experience has become one of iQiyi's most important missions.
iQIYI's "Proactive Compliance Risk Disposal Platform" and "Full Life Cycle Privacy Protection Plan" selected this time are the two pillars of iQIYI's personal information protection construction.
Xie Danming, vice president of iQiyi and head of the privacy and security management leading group, said that in iQiyi’s execution strategy, every step closely revolves around how to integrate privacy protection into every link of the product life cycle. The execution team continuously optimizes processes, strengthens technological innovation, and strictly supervises the compliance of each service so that the privacy of every user is substantially protected.
The proactive compliance risk management platform incorporates privacy protection into the product development process through engineering methods to ensure that iQiyi's collection and processing of personal information meets legal compliance requirements from the source.
According to iQiyi's technical team, every time iQiyi creates a product requirement that involves the processing of personal information, it needs to start a privacy-native assessment process through the proactive compliance risk management platform. Various technical monitoring tools are organically related to the product release process, and together they build a complete technical protection system.
This includes: the product manager identifies whether the demand design complies with the principles of legality, legitimacy, necessity, integrity and other principles of personal information protection based on standardized evaluation guidelines, and explains basic needs such as personal information type and processing methods; at the demand design stage, the focus will be In terms of data protection and user rights protection, the front-end and back-end detailed design of notification and authorization of personal information processing rules, as well as the full life cycle security protection of personal information; in the needs implementation assessment stage that determines whether the needs and functions can finally be launched online , then technical analysis and compliance review will be conducted on the implementation of product personal information protection. The release process is linked to the privacy needs assessment results, and requirements that have not completed the assessment or failed the assessment cannot be put online.
If the "Proactive Compliance Risk Disposal Platform" is committed to ensuring that personal information processing meets the "minimum necessary" principle from the source, the "iQiyi Full Life Cycle Privacy Protection Plan" further builds iQiyi's management, technology, Multiple aspects of the process form a systematic and closed-loop privacy protection solution.
At present, iQiyi has improved its internal management system and operating procedures, clarified the management department and person in charge of personal information protection, timely interpreted national laws and regulations, formulated privacy red lines, and implemented them in all aspects of product development, evaluation and operation; technically, it is independent The developed code audit tools, mobile security monitoring platform, traffic collection and analysis center, compliance risk management platform, etc. achieve full coverage of compliance testing in the process of code development, online release, and online operations.
机制流程上，爱奇艺通过隐私原生流程评估、季度巡检强化日常个人信息保护合规审计，通过“安全吹哨人”机制提高应急反应能力，通过定期召开隐私安全大会，宣贯国家隐私合规法律法规，解读合规动态和趋势，分享内部合规工作优秀案例，开展内部合规积分评比，奖励先进拉动后进，显著提升公司整体隐私合规水平。
Through the construction of the personal information protection system, iQiyi's overall compliance level has been continuously improved. While the pass rate of daily business compliance assessment has increased, the risks discovered have been significantly reduced, and the need for regulatory rectification has been reduced to single digits. It is precisely because of security compliance and content innovation that the user experience has been greatly improved.
Since the establishment of the platform, iQiyi has actively participated in the formulation of more than 20 laws and standards on personal information protection and data security by national regulatory authorities, and has continued to carry out external exchanges and cooperation to share iQiyi's personal information protection methods and ideas. The continuous improvement of technology and processes has not only laid a solid foundation for the ecological development of iQiyi products, but also achieved good results in improving product and service quality and safeguarding user rights and interests.
iQiyi CTO Liu Wenfeng said: "At the strategic level, we deeply realize that privacy security is not only the basic rights of users, but also the core competitiveness of the company's sustainable development. Therefore, iQiyi will continue to invest resources to continuously improve and upgrade our iQiyi’s privacy protection system ensures that while providing users with rich and colorful content, it can also provide them with the most stringent protection of their personal information. iQiyi will continue to work with the entire industry to promote the mobile Internet with strategic wisdom and strong execution. Application service capabilities are moving towards higher standards.”
This article is shared from the WeChat public account - iQIYI Technology Product Team (iQIYI-TP).
If there is any infringement, please contact [email protected] for deletion.
This article participates in the " OSC Source Creation Plan ". You who are reading are welcome to join and share together.
