Courier receipts are frequently leaked, and who is responsible for protecting personal privacy?

Why is it difficult to promote the privacy sheet?

(picture)

  Every time Ms. Xin, a citizen, went to the express station to pick up the package, she could see a large number of express outer packaging piled up at the packaging recycling point at the door. , The phone is clear at a glance, "This can easily lead to information leakage and be used by people with ulterior motives."

  In recent years, incidents of personal privacy leakage caused by express delivery have occurred from time to time.

Recently, the State Post Bureau, the Ministry of Public Security, and the National Cyberspace Administration of China jointly held a video promotion meeting for the special action on personal information security governance of major e-commerce platform companies involving postal express delivery, emphasizing the strengthening of information security source governance, promoting the popularization of privacy sheets, and clearly proposing that within the year. A timetable for achieving full coverage of postal express delivery.

  It is understood that the problem that express delivery slips are easy to leak privacy has long been a concern. Five years ago, some express delivery companies tried to use privacy slips, but it was only a "flash in the pan", and then it disappeared.

What is the significance of implementing the express privacy sheet?

What is the difficulty in implementing?

How to better promote the full coverage of postal express privacy face sheets?

With these questions, the reporter conducted an investigation.

Express receipts frequently leak personal information

  On June 28, the police in Yuyao, Zhejiang Province announced that they had destroyed a new black and gray industrial chain that violated citizens’ personal information. The gang used Trojan software to steal more than 5 million pieces of information on express delivery orders from Yuncang and sold them to fraud gangs. Profit of more than 30 million yuan.

  On July 21, the Wuxi procuratorate notified that two suspects were charged with the crime of infringing on citizens' personal information.

Every time the courier Wu received a courier or delivery, he would secretly take a photo of the courier receipt with his mobile phone, and sell it after collecting a certain amount.

The fellow Wu Moumou was responsible for helping to find buyers with high prices. In just one month, Wu Mou sent tens of thousands of express delivery orders to Wu Moumou.

  On July 27, the Guangzhou Municipal Public Security Bureau notified the situation and typical cases of prominent cyber crimes such as the whole chain crackdown on the violation of citizens' personal information in 2022.

The police dug up a number of gangs that illegally obtained information on reselling express delivery receipts, arrested more than 70 criminal suspects, and seized more than 1.87 million express delivery receipt information, destroying a criminal chain that provided overseas fraudsters with express delivery receipt information.

  Citizens often encounter such a situation, and suddenly receive the so-called "logistics customer service call", claiming that the express delivery is lost or damaged, and asks to add WeChat for compensation.

According to the police, generally speaking, the buyer initiates the application for refund and returns, and the unfamiliar calls take the initiative to request refunds and returns, which are often traps of liars.

This is also a common method of telecommunication network fraud.

The reason why someone will be deceived is mainly because the scammer can provide information such as the logistics number.

"Once the courier receipt information is leaked, it is likely to be used by criminals to commit crimes." said Mr. Liu, a citizen who had received such calls.

Express privacy orders are still hard to find in the market

  In recent days, the reporter visited a number of express delivery stations in various districts of our city and found that most of the express delivery receipts clearly displayed the recipient's name, phone number, address and other personal information.

Generally, a courier station will set up a centralized disposal point for the outer packaging at the door. Many people remove the outer packaging after taking the courier, throw it directly at the centralized disposal point and leave. Few people will tear up the face sheet or paint their personal information with a pen.

  Mr. Wu, a citizen, told reporters that when the courier delivered to his door before, he would smear the information on the outer packaging with a pen and then discard it.

Now most of the couriers have to go to the courier station to pick them up. Because of the epidemic, he is afraid that the outer packaging will not be clean. Every time he unpacks the package and throws it into the trash can, he has no time or opportunity to deal with the express delivery order.

The reporter interviewed 30 citizens randomly, and 90% of them would never tear up or smear express delivery slips.

  It is understood that in order to prevent the leakage of personal information on express receipts, as early as 2017, some express companies and platforms have tried to launch privacy receipts. address.

But 5 years later, the penetration rate of privacy face sheets in the express delivery industry is not high.

  Mr. Yu, a citizen, said that he went to the express station to pick up the express a few days ago. After reporting the mobile phone number, the station staff did not find the express from the system, "I thought it was the express that was lost, but then I received a text message on my mobile phone, which said There is a virtual mobile phone number, it turns out that the seller chose the privacy sheet service when sending the express delivery. I reported the virtual mobile phone number and successfully got the express delivery from the station." After the express delivery, Mr. Yu found his personal information on the express delivery sheet. It was hidden, "This is the first time I have encountered such a situation."

  Ms. Yang, a citizen, said that she has been shopping online for more than 10 years and has never received a courier using a privacy receipt. Among the nearly 10,000 items she has purchased, the recipient's name, phone number and address are listed on the express receipt. They are clearly marked, "I only know that when I buy takeout on the ordering platform, the mobile phone number will be hidden on the order. I really don't know that the express delivery has a privacy order, and the number can be hidden."

Some express companies still do not have the option of "Privacy Form"

  The person in charge of a courier station told reporters that among the couriers currently received by the station, the express delivery services issued by the Pinduoduo platform use more privacy forms, but this does not affect the consumer's pickup. He can see the recipient from the system. mobile phone number.

On Taobao, users can choose to turn on the phone number protection for free, or pay 1.5 yuan to 2 yuan per month to customize an exclusive personalized face sheet, and the phone number, name, address and other receiving information can be hidden, "but generally the hidden number is the middle. 4 digits, but I am here to pick up the item, generally the recipient can report the last 4 digits of the mobile phone, and it will not affect the pickup."

  On August 3, the reporter tried to place an order for delivery on the WeChat public accounts or mini programs of different express delivery companies.

SF Express places an order on WeChat, fills in the address, and then selects "Encryption of Information" to use, so that the information of the sender and receiver of the waybill will be hidden when inquiring online, including the information on the face note posted on the package.

Express companies such as Yunda Express and EMS China Post Express and Logistics can choose the free "Privacy Form" value-added service on the order page, while on the order page of STO Express, ZTO Express, Yuantong Express and other companies, there is no option to choose. Option to hide personal information.

Time-consuming and laborious, no one finds it troublesome

  A seller on an e-commerce platform said that if the phone number, name and address are hidden on the express receipt, it will often lead to untimely delivery or citizens not receiving the pickup code, which will lead to complaints. She has to deal with them one by one. Contact the courier company for verification and explain to the buyer that the workload has increased invisibly, "Most of the couriers are now delivered directly to the courier station, and the recipient may not be able to receive the pickup code due to different systems, and the mobile phone number may not be entered. Show waybill information, affect pickup."

  A staff member of a courier company told reporters that it is very troublesome to use the privacy sheet, especially when the courier is placed in the courier cabinet, the courier needs to scan the courier one by one with a code scanner, which is time-consuming and laborious.

The use of the privacy form not only requires additional inspection by the courier, but also increases the cost of the express company. This is also the reason why some express companies listed the privacy form as a value-added service in the early stage of the promotion of the privacy form, and users want to hide their personal information. up, extra charge is required.

Our city actively promotes the use of privacy sheets

  At present, our city is actively promoting the use of privacy forms by delivery companies.

In July, the Municipal Postal Administration, the Municipal Public Security Bureau and the Municipal Network Information Office jointly held a special promotion meeting on personal information security governance in the city's postal express delivery sector.

  The meeting emphasized that it is necessary to focus on strengthening source governance, and actively promote the de-identification technology of personal information such as mailing and delivering enterprise privacy sheets and virtual numbers, so as to block the possibility of criminals committing crimes from the source of information.

It is necessary to urge all delivery companies to carry out self-inspection of personal information and data security protection, find out the basics, establish a ledger, and achieve full coverage and no omissions.

It is necessary to strengthen inter-departmental coordination, give full play to the functional advantages of their respective departments, jointly carry out technical testing and on-site supervision and inspection, continue to crack down on illegal and criminal activities involving the infringement of citizens' personal information in the field of postal express delivery, and severely crack down on the use of employees' accounts to steal and sell information, internal Practitioners secretly photographed face sheets for sales, and used "Trojan horses" and "nei ghosts" to steal order logistics information from e-commerce platform online stores, and focused on detecting a number of typical cases.

It is necessary to increase the verification of real-name authentication in the postal express delivery industry, and urge delivery companies to standardize the user safety management of delivery agreements.

Logistics expert

There are three problems to be solved in the promotion of privacy face sheets

  Wang Junyan, associate professor of the Department of Logistics Engineering, School of Economics and Management, Tianjin University of Science and Technology, believes that there are three main problems that need to be solved in the promotion of express delivery privacy bills.

  a message encryption

  It involves the encryption of order information in the order processing system, including customer name, phone number, address, and commodity information.

This information, especially the phone number, needs to be called by the courier at the end.

After encryption, the courier needs to call the order processing system, and only after the transfer can contact the consumer.

Encryption and forwarding are relatively mature in technology, and some platforms have implemented encryption of phone numbers in order processing.

  Two system integration

  If merchants and logistics are not the same platform (such as JD.com, Taobao, etc.), the popularization of privacy face sheets needs to solve not only the problem of information encryption, but also the problems of system integration and connection between platforms, information invocation, etc., which requires On the basis of information encryption, the integration of order system and logistics system is realized.

From the consumer's order to the delivery of the goods, all platforms involved in the whole process are integrated into the system. The integrated system can complete the information transfer and meet the courier's needs for the information on the privacy sheet.

  Three increased costs

  The relevant costs in the process of promoting the privacy face sheet include the cost of information encryption and the cost of system integration (including the cost of invoking the information by couriers).

System integration requires negotiation between platforms to share system integration costs.

There is also the transfer call cost of the encrypted information by the courier at the end, which involves that once the transfer process of the courier fails or the recipient's phone cannot be connected, it will affect the delivery time, delivery errors and consumer dissatisfaction complaints. and other costs.

Express supermarkets, courier stations, etc. may also increase the cost of communication with consumers or take the wrong parts due to shielding information.

This requires the completion of the training of courier personnel, as well as the staff of express supermarkets and post stations, so as to be able to deal with problems in the process of information transfer and transfer in an emergency.

  Wang Junyan said that in addition to solving the above three problems, consumers should also raise their awareness of privacy protection in the comprehensive popularization of express privacy receipts.

E-commerce and logistics platforms to enhance the concept of protecting consumer information security can also help promote the promotion of privacy face sheets.

In addition, the state also needs to formulate relevant laws to hold accountable for information leakage at each node in the whole process from receiving orders on e-commerce platforms to express delivery to consumers, and impose corresponding penalties; the state should formulate relevant standards to continuously promote e-commerce and The docking of the logistics platform completes the invocation of private information, which effectively promotes the promotion and popularization of the privacy sheet.

Lawyer's statement

Popularizing the Privacy Form to Become a "Required"

  Wang Xiujie, a lawyer from Tianjin Rongyao Law Firm, believes that our country has always attached great importance to the legislation and institutional guarantee of the protection of citizens' personal information.

The Personal Information Protection Law, which came into effect on November 1, 2021, clearly stipulates that no organization or individual may illegally collect, use, process, or transmit other people's personal information, and may not illegally buy, sell, provide or disclose other people's personal information, or commit related violations or crimes. Those who violate the law shall be punished by public security administration or investigated for criminal responsibility.

At the same time, the "Personal Information Protection Law" specifically mentions in terms of the obligations of personal information processors that when processing personal information, corresponding security technical measures such as encryption and de-identification should be taken.

  "As far as the express delivery industry is concerned, it is clearly stipulated in the "Interim Regulations on Express Delivery" that came into effect on May 1, 2018 that companies operating express delivery businesses should establish express delivery bills and electronic data management systems, and properly keep electronic data such as user information. , regularly destroy the express waybill, and take effective technical means to ensure the security of user information. Therefore, it should be said that the protection of users' information security is the legal obligation of the delivery service company." Wang Xiujie said that the promotion and popularization of express delivery privacy at this stage should be said to be delivery. The concrete embodiment of the service enterprise's implementation of its statutory obligations.

  It is of great significance to promote and popularize the privacy face sheet and turn it from a technology into a "must-have" system, which is conducive to protecting the personal information security of express users from the source.

  Wang Xiujie suggested that, from the perspective of delivery service companies, in addition to implementing the "privacy face sheet" system, they should also formulate internal management systems and operating procedures; implement classified management of personal information; reasonably determine the operating authority for personal information processing, and regularly review business practices. personnel to conduct security education and training; formulate and organize the implementation of emergency plans for personal information security incidents, etc., to ensure the security of users' personal information.

From the perspective of the majority of consumers, the awareness of protecting the security of personal information should be raised. Before discarding the express package, be sure to smear out part of the personal information, or directly tear up the face sheet.

  (Reporter Han Aiqing, photojournalist Wang Qian in this edition)