Did Didi, which makes travel convenient, sell its secrets to the US?
Compiled from: Jiangxi Communist Youth League, Red Star News
Case review
On July 4, the Cyberspace Administration of China issued a notice stating that the 'Didi Chuxing' app has serious illegal and irregular issues in collecting and using personal information and has been ordered to be taken down for rectification.
On July 2, the Cyberspace Administration of China issued an announcement regarding the launch of a cybersecurity review on "Didi Chuxing," stating: In order to prevent national data security risks, safeguard national security, and protect public interest, according to the "National Security Law of the People's Republic of China" and the "Cybersecurity Law of the People's Republic of China," the Cyberspace Administration of China, in accordance with the "Measures for Cybersecurity Review," is conducting a cybersecurity review on "Didi Chuxing." To cooperate with the cybersecurity review work and prevent the expansion of risks, "Didi Chuxing" will suspend new user registrations during the review period.
In response, Didi stated that it will actively cooperate with the cybersecurity review. "During the review period, under the supervision and guidance of the relevant departments, we will comprehensively sort out and investigate cybersecurity risks, and continuously improve our cybersecurity system and technical capabilities."
According to the relevant provisions of the "Cybersecurity Review Measures," under normal circumstances, a cybersecurity review is completed within 45 working days, and in more complex cases, it may be extended by 15 working days. For review projects that enter the special review procedure, it may take an additional 45 working days or longer.
This also means that 'DiDi Chuxing' may suspend new user registrations within 45 working days.
It is understood that currently users who have downloaded the Didi app can use it normally, and passengers' travel and drivers accepting orders are not affected.
[1] The author's perspective
It is worth noting that the phrase 'to prevent national data security risks, safeguard national security, and protect public interests' appeared in the announcement. From these few words, it is clear that this is by no means a formality, but rather points out that Didi Chuxing is suspected of infringing on national security and public interests. Therefore, it makes sense to prohibit new users from registering on Didi Chuxing during the review period in order to prevent the risk from expanding.
In April 2020, our country issued the "Cybersecurity Review Measures." However, since then, cybersecurity reviews have never been truly implemented. This time, Didi became the "first to try it out" company, and it is also related to the "National Security Law," indicating that this time Didi really "can't escape the consequences." But why would a ride-hailing app threaten national security?
The author believes that there are mainly the following three risks:
First, as a transportation app, Didi has access to China's geographic maps, which may include military bases and the like.
Secondly, Didi inevitably has access to users' private information, including names, ages, phone numbers, frequently traveled routes, etc. Combined with big data analysis, the amount of information obtained is immeasurable.
Third, it is rumored online that Didi is packaging and selling data to the United States in order to go public there. According to Article 177 of China's Securities Law, without the consent of the securities regulatory agency of the State Council and the relevant departments of the State Council, no organization or individual shall provide documents and materials related to securities business activities to foreign countries without authorization.
Whether Didi leaked information unintentionally or handed it over willingly, this incident serves as a wake-up call for major companies. While pursuing profits, they must not only protect users' personal privacy but also pay attention to cybersecurity and national security. These three aspects may seem independent, but they are actually closely intertwined. Personal privacy cannot be violated, and the country's bottom line must not be crossed. This time, this well-established ride-hailing app was removed from the shelves, bringing Didi not only a serious punishment but also an opportunity for calm reflection.
