China Justice Observer


EnglishArabicChinese (Simplified)DutchFrenchGermanHindiItalianJapaneseKoreanPortugueseRussianSpanishSwedishHebrewIndonesianVietnameseThaiTurkishMalay

China Imposes Administrative Penalty against Didi for Cybersecurity

Mon, 29 Aug 2022
Categories: China Legal Trends

On 21 July 2022, the Cyberspace Administration of China (CAC) fined Didi Global (hereinafter “Didi”) CNY 8.026 billion and two Didi executives – CEO Cheng Wei and president Liu Qing – CNY 1 million apiece.

In July 2021, the CAC launched an investigation on Didi’s cybersecurity practices and then, based on the issues and clues found in the investigation, filed a case against Didi for the company’s alleged violations.

Didi was founded in January 2013 and listed on the New York Stock Exchange on 30 June 2021. Its principal businesses include online ride-hailing and ride-sharing services.

According to the CAC, Didi had committed a total of 16 violations.

For one thing, Didi had excessively collected personal information and compulsorily collected sensitive personal information. More precisely, it had illegally collected screenshots, copy-and-paste content, and lists of installed apps from users’ phones and excessively gathered passengers’ facial recognition data, ages, occupations, and interpersonal relationships, as well as drivers’ educational background and personal identity information, etc.

For another, Didi failed to fulfill its obligation to inform users about its processing of their personal information. It had analyzed passengers’ travel intentions without explicitly informing them and failed to clarify what it had done with users’ device data and other 18 items of personal information.

The above-mentioned actions violated China’s Cybersecurity Law, Data Security Law, and Personal Information Protection Law.



Cover Photo by Cheng Huang on Unsplash

Contributors: CJO Staff Contributors Team

Save as PDF

Related laws on China Laws Portal

You might also like

SPC Publishes Typical Cases on Public Security Crimes

In April 2024, China's Supreme People's Court (SPC) released five typical cases illustrating crimes against public security, emphasizing clarifications on trial criteria and sentencing principles, featuring a case involving serious injuries from objects thrown off a high-rise building.

Beijing Court Upholds Workers' Right to Offline Rest

The Beijing No. 3 Intermediate People's Court ruled that workers are entitled to overtime pay for “invisible overtime work” conducted via social media outside of working hours, protecting their right to “offline rest”.

China Revises State Secrets Protection Law

China’s national legislature, the National People’s Congress, revised the State Secrets Protection Law to enhance information classification, secrecy in technological innovation, and precise protection of state secrets, effective May 1, 2024.