Police cracking down on info infringement crimes

All sectors of society urged to fight illegal activities involving high tech

Senior Chinese cybersecurity police officers said on Thursday that strengthened efforts are being made to combat sources of personal information infringement involving the use of the latest technologies such as artificial intelligence, including ChatGPT, and cloud computing.

Sun Jinfeng, political commissar of the Ministry of Public Security's Bureau of Network Security Protection, said the number of cases involving the infringement of citizens' personal information has significantly increased over the past two years.

Since 2020, public security organs nationwide have solved 36,000 such cases and detained 64,000 suspects. Furthermore, the ministry has seized more than 30 million SIM cards used for illegal purposes and frozen over 300 million online platform accounts.

Sun also noted that the cases of personal information infringement have occurred across an increasingly diverse range of sectors, from healthcare, education and real estate to logistics and e-commerce.

Meanwhile, a series of abhorrent illicit operations, such as telecom fraud, harassing calls and online paid posting, have emerged, he said.

"Crimes related to personal information infringement have become a 'breeding ground' for illicit industries, severely jeopardizing citizens' personal rights and property safety, as well as disrupting the country's normal economic and social order," he said.

Criminals often obtain personal information through various means, including fraud, theft, illegal collection and reselling, according to Huang Xiaosu, technology director of the ministry's Bureau of Network Security Protection.

One prominent emerging example of infringement involves manipulating existing personal data by combining various data sources to generate new information. An example of this type of violation, as emphasized by Huang, is using AI technology to create dynamic facial recognition data from preexisting images.

Li Tong, deputy head of the Bureau of Network Security Protection, emphasized that crimes related to facial recognition and verification are linked to the misuse of technologies such as facial recognition and artificial intelligence.

Criminals primarily exploit materials such as photos, especially identity card photos, and combine people's names and ID numbers to deceive facial recognition verification systems, Li added.

For example, in May, a man surnamed Feng in Shandong province fell victim to an AI face-swapping scam. A fraudster tricked him by impersonating a relative using the technology during a video call.

Convinced of the swindler's "authenticity", Feng transferred a total of 300,000 yuan ($41,600) to the designated account before realizing he had been scammed. Upon contacting the police, they were able to trace the transactions and apprehend three suspects in Guangdong province. The case is under further investigation.

Collaborating with key State laboratories, public security organs have conducted security assessments using facial recognition and anti-spoofing technology. The agencies have identified the risks and vulnerabilities of the facial recognition verification system in key applications, including instant messaging, online broadcasting, e-commerce platforms and financial transactions, and informed their operators to make upgrades, said Li.

Another typical example of personal information infringement involves insiders from certain industries illegally disclosing personal information.

About 2,300 such "insiders" in industries such as telecommunications, hospitals, insurance companies, real estate and express delivery have been arrested since 2020, according to the ministry.

Sun, the political commissar, emphasized the importance of all sectors of society working together to fight illegal activities involving personal information infringement. The public should increase their awareness of personal information protection and deny criminals any opportunities.

Relevant companies should enhance their sense of responsibility, implement security measures and regulate the collection and use of such information.

yangzekun@chinadaily.com.cn