Data has become an important asset and core competitiveness of the banking industry, but it is not uncommon to inquire personal information at random

How to protect the financial information rights of ordinary customers?

  In the process of rapid business development of banking financial institutions, data has become an important asset and core competitiveness. However, in recent years, many banks have unauthorized inquiries about personal credit information without authorization, leading to the disclosure of personal privacy. Recently, in the name of cooperating with major customers, China CITIC Bank has leaked user information and once again sounded the alarm for the protection of financial information rights and interests of ordinary customers.

  Recently, China CITIC Bank has attracted public attention because it leaked the personal transaction flow of a talk show actor. CITIC Bank's customer service responders should talk to the actor, saying that it is to meet the requirements of major customers.

  Can banks open convenient doors for large customers at will? With massive amounts of data in hand, shoppers are bullying, who will protect consumers? "Worker Daily" reporters investigated this.

It is not difficult to print employees' pipeline operations for large customers

  An account manager of a local commercial bank told reporters that there are two possibilities for the bank to disclose personal information: one is to use technology to export from the back-end database, and the other is to export from the front desk. For example, printing employee turnover for large customers, just enter the back-end system, you can query transaction details by bank card number only. According to media surveys, in the black market that provides water flow inquiry, 2,000 yuan can be used to check one month's water flow, and 5,000 yuan can be used to check all water flow.

  "Banks generally prohibit the disclosure of account transaction details to third parties. Taking risks in order to maintain customer relations is not allowed." The above-mentioned account manager said that personal transaction flow is provided at the request of major customers, reflecting the lack of internal risk control of the bank .

  On May 7, a reporter proposed at a commercial bank outside Dongzhimen in Beijing to inquire about personal transaction flow. The bank staff told reporters: "According to the regulations, users who want to check personal transaction flow need to bring their ID cards and bank cards to the non-cash business window of their bank's business outlets to print through bank staff. Except in special circumstances, no one else has the right to print . "

  Afterwards, the reporter went to another bank business outlet with only self-service machines. The bank staff introduced several methods of self-service printing to reporters, all of which also required user bank cards or ID cards and related authorization information.

Data becomes an important asset of the bank

  According to data released by the central bank, as of the end of 2019, China had opened 11.352 billion bank accounts. Among them, 11.284 billion personal bank accounts, an increase of 12.07% year-on-year. The country has 8.09 bank accounts per capita. In addition, as of June 2019, China ’s credit information system has accumulated a total of 990 million natural persons, 25.91 million companies and other organizations, and has become the world ’s largest credit information system with the largest number of people, the largest data scale and the widest coverage. , Basically covering every enterprise and individual with credit activities nationwide.

  In this regard, some insiders said that in the process of rapid development of banking financial institutions, data has become an important asset and core competitiveness.

  However, banks that hold massive amounts of data have repeatedly bullied customers. The reporter searched the Judgment Document Network and the public information and learned that in recent years, many banks have unintentionally inquired personal credit information without authorization, leading to the disclosure of personal privacy. For example, at the beginning of this year, the National Computer Virus Emergency Response Center discovered through Internet monitoring during the "Net Net 2020" special operation that many banks have "not expressly applied to all privacy rights of users and are suspected of privacy non-compliance"; April A punishment message released on the 23rd showed that Zhejiang Daishan Rural Commercial Bank was fined 300,000 yuan for supervision and disclosure of customer information. In 2017, CITIC Bank, which was at the center of public opinion, was fined 150,000 yuan in 2017 for violating the "Interim Measures for the Management of Basic Databases of Personal Credit Information" and the "Credit Management Regulations."

Consumer protection is still insufficient

  Banks leaked user information in the name of cooperating with major customers and once again sounded the alarm for the protection of financial information rights of ordinary customers. The financial industry involves the safety of personal assets, and financial regulatory authorities have always made confidentiality obligations a priority of financial regulation. On April 22, Huang Hong, vice chairman of the China Insurance Regulatory Commission, emphasized in a press conference held by the State Council that the China Insurance Regulatory Commission always adheres to a zero-tolerance attitude towards infringement of financial consumer rights and damage to customer information security. Investigate and deal with in accordance with the law and crack down severely.

  “Given that financial data usually involves sensitive personal information and may be used by counterparties or outside parties, causing possible economic losses to customers, the risk control of financial data, information security and data protection capabilities, and technical processing methods should be improved "Said Jiang Xiangyu, a senior consultant of Xie Li Law Firm. As the Internet level of the financial industry continues to increase, personal information security faces greater challenges.

  Some insiders said that at present, China still has deficiencies in the protection of personal financial information, lacks specific legislation, and the legal investigation mechanism for illegal institutions and individuals is not yet perfect. It is necessary to establish a truly enforceable control mechanism and increase the cost of illegality. There should be clear regulations and standards on how to store and process the collected personal information. Relevant departments should improve information collection and protection technologies and processes, clean up and reduce unnecessary information collection channels, and destroy outdated information in a timely manner.