On August 10, the press insiders learned that the China Banking and Insurance Regulatory Commission (CIRC) recently issued the notice on carrying out the special rectification of the chaos of the banking and insurance institutions infringing on personal information rights and interests (hereinafter referred to as the “notice”) to all the banking and insurance regulatory bureaus and banking and insurance institutions, requiring them to comprehensively sort out and eliminate the problems and loopholes in the protection of personal information in the banking and insurance industries, Supervise and urge banks and insurance institutions to establish and improve the working mechanism of consumer personal information protection< Br > < div class = "height" > < / div > the notice requires all banking and insurance institutions to comprehensively understand their business behaviors and management related to consumer personal information processing activities since 2021, find out the problems in their personal information protection, and list the problems. In the process of self-examination, we should persist in making investigations and making corrections. For the problems that cannot be rectified in a short time, the rectification account shall be established, the rectification measures shall be defined, and the rectification shall be carried out step by step< Br > < div class = "height" > < / div > at the same time, all banking and insurance regulatory bureaus should advance the self-examination and supervision work, compact the self-examination responsibility of the institutions, and prevent the situation that the notice is changed and the self-examination is not in place< Br > < div class = "height" > < / div > for the problems found in the rectification, the notice points out that all banks and insurance institutions should establish files one by one to ensure that the rectification and accountability are in place. Problems that violate the rules and regulations of the banking and insurance industries shall be handled in accordance with the regulations; The improper operation shall be stopped or corrected immediately, and those who seriously infringe on consumers’ right to information security, such as disclosing personal information, shall be held accountable; Problems involving violations of laws and crimes shall be transferred to judicial organs for punishment< Br > < div class = "height" > < / div > the China Banking and Insurance Regulatory Commission requires that regulatory authorities at all levels should carry out supervision, spot check and supervision on issues that infringe on consumers’ right to information security in combination with daily supervision, on-site inspection, report investigation and complaint supervision, and highlight the key points. Any violation of relevant laws and regulations shall be seriously investigated and dealt with according to laws and regulations; For the problems that have been self inspected and rectified by the institution, the punishment may be reduced or not punished according to the law according to the degree of violation and the consequences; The institutions found to be ineffective in self-examination and concealing and failing to report shall be seriously pursued and severely punished< Br > < div class = "height" > < / div > this special rectification work mainly focuses on the self-examination of banks and insurance institutions, and the regulatory department will carry out spot checks and supervision in a timely manner< Br > < div class = "height" > < / div > from the perspective of time progress, the period from August to September 2022 is the period of self inspection and rectification. All banking and insurance regulatory bureaus organize the banking and insurance institutions (including insurance professional intermediaries) under their jurisdiction to seriously carry out self inspection and complete the rectification on the basis of self inspection. All banking and insurance institutions shall complete the self inspection and rectification work and report in writing to the local banking and Insurance Regulatory Bureau before September 20. The banking and insurance institutions directly supervised by the CBRC shall submit the self inspection and rectification report to the consumer Insurance Bureau of the CBRC before September 20< Br > < div class = "height" > < / div > the period from September to November 2022 is the supervision and spot check period, and all banking and insurance regulatory bureaus carry out supervision and spot check on the basis of institutional self-examination< Br > < div class = "height" > < / div > the last stage is the summary and report stage. Before December 20, 2022, all banking and insurance regulatory bureaus shall submit the special rectification work report on the violations of personal information rights and interests of banking and insurance institutions to the consumer Insurance Bureau of the CBRC< Br > < div class = "height" > < / div > the China Banking and Insurance Regulatory Commission requires that all banking and insurance institutions should deeply analyze the problems found in this special rectification and find out the root causes of the problems. If the problem is caused by a subordinate organization, the responsibility of the branch shall be compacted and the rectification shall be completed to the letter; If the root cause of the problem lies in the headquarters, it is necessary to timely adjust and optimize the relevant working mechanism, strengthen the system constraint and responsibility implementation, and promote the root cause rectification< Br > < div class = "height" > < / div > regulatory authorities at all levels should, in combination with the problems found in this special rectification, urge banks and insurance institutions to establish and improve personal information protection systems and mechanisms, improve business rules and operating procedures, standardize personal information processing and management behavior, and comprehensively improve the level of consumer personal information protection.