privacy terms-of-service
Privacy policy pop up in China
<p>There is a new New Privacy Policy Requirements For Mobile Apps In China. One of rules is &quot;They must be in a pop-up message, either on your landing or login page.&quot;</p>
<p>Can a full screen be alternative? I am looking for official confirmation that it is has to be pop up, and a full screen alternative is not law compliant.</p>
<p>I am designing for giant company which want/has to be fully law compliant.</p>
<p>Here is a link to the new requirements: <a href="https://www.appinchina.co/blog/new-privacy-policy-requirements-for-mobile-apps-in-china/" rel="nofollow noreferrer">https://www.appinchina.co/blog/new-privacy-policy-requirements-for-mobile-apps-in-china/</a></p>

<p>The page you referenced contains a link to the relevant announcement, dated October 31, 2019 (released November 6, 2019) which does <strong>not</strong> really prescribe any such micro-managed &quot;specific requirements&quot; as they claim.</p>
<p>(For example, via Google translate description of the eight issues they are addressing)</p>
<blockquote>
<p>(1) Illegal collection of user personal information</p>
</blockquote>
<ol>
<li><p>&quot;Privately collect personal information&quot;. That is, the APP does not clearly inform the purpose, method and scope of collecting and using personal information and collects the user's personal information before obtaining the user's consent.</p>
</li>
<li><p>&quot;Over-range collection of personal information&quot;. That is, the APP collects personal information, is not necessary for the service or there is no reasonable application scenario, and collects personal information over the range or frequency, such as address book, location, ID card, face, etc.</p>
</li>
</ol>
<p>(2) Unauthorized use of user personal information</p>
<ol start="3">
<li><p>&quot;Privately shared to a third party&quot;. That is, the APP shares with other applications and uses the user's personal information without user consent, such as device identification information, product browsing records, search usage habits, and commonly used software application lists.</p>
</li>
<li><p>&quot;Force users to use directional push function&quot;. That is, the APP does not inform the user, or does not mark it in a prominent way, and uses the collected user search, browsing history, usage habits and other personal information for targeted push or precision marketing, and does not provide the option to turn off the function.</p>
</li>
</ol>
<p>(3) Unreasonable request for user rights</p>
<ol start="5">
<li><p>&quot;Do not give permission without permission&quot;. That is, when the APP is installed and running, the user is asked for rights that are not related to the current service scenario. After the user refuses to authorize, the application exits or closes.</p>
</li>
<li><p>&quot;Frequently apply for permission&quot;. That is, after the user explicitly rejects the permission application, the APP frequently applies to open the address book, positioning, SMS, recording, camera and other permissions that are not related to the current service scenario, harassing the user.</p>
</li>
<li><p>&quot;Excessive permission&quot;. That is, when the user does not use related functions or services, the APP applies in advance to open the address book, positioning, SMS, recording, camera and other permissions, or exceeds its business functions or services, apply for address book, positioning, SMS, recording, camera and other permissions .</p>
</li>
</ol>
<p>(4) Setting up obstacles for user account cancellation</p>
<ol start="8">
<li>&quot;It is difficult to cancel the account.&quot; That is, the APP does not provide users with an account cancellation service, or sets an unreasonable obstacle to the cancellation service.</li>
</ol>
<p>That is the problem statement, the announcement says they want the companies collecting information to fix the problem themselves or it will be legislated on them.</p>
<hr />
<p>It's now 2020 and the Ministry has engaged a third-party testing agency to verify applications, and has given a small number of them notice to fix problems or be removed by specific dates). The first batch has already passed the due date, the second by mid-July.</p>
<p>I did not find a link to the actual law, but the Ministry announcements of non-compliant applications referred to the requirement to &quot;<strong>clearly inform</strong>&quot; the user of what the app was doing.</p>
<p>Without a native Chinese-speaking lawyer who is app-savvy to find and interpret the actual regulations it's going to be hard to give a specific answer to the question of how to meet the requirements.</p>
<p>For MIIT announcements you can search <a href="http://www.miit.gov.cn/Searchweb/news.jsp" rel="nofollow noreferrer">this</a> site using the English term APP and you will get a number of relevant results (all in Chinese, of course).</p>
