When William Zhang’s car insurance was about to expire in March, he did not need to look far for renewal options. In the two months before the policy was up, Zhang received calls almost daily from insurers trying to sell him a new one.
Since his initial policy was from Ping An Insurance Group, it was natural that the company had been in touch.
“What confuses me is how other insurance companies knew about it,” said Zhang, a 26-year-old government employee from Shandong.
Three other car owners told reporters that they had experienced the same problem.
Personal data has become widely available in China and can be scooped up for pennies by insurance companies, banks, loan sharks and scammers alike, according to sellers and financiers interviewed by reporters.
China in May introduced its most comprehensive data protection laws to date, tightening restrictions on the sharing of private data held by financial institutions and other firms.
“Personal information leaks are risky,” said Susan Ning (寧宣鳳), a partner at the law firm King & Wood Mallesons in Beijing. “Such information can facilitate other crimes.”
Insurers often buy numbers from shadowy online data sellers, who themselves have acquired the information illegally, according to people in the industry.
Some companies illegally buy information from motor vehicle departments, car licensing authorities, car sellers or police stations, said Michelle Hu, a partner at Bain & Co who has been a consultant on insurance deals.
By entering keywords like “personal data” or “cellphone data” in Chinese, reporters found more than 30 groups created for the purpose of selling and buying personal information on Tencent’s instant messaging service QQ and Baidu Inc’s forum site Tieba.
Baidu declined to comment.
In an e-mailed statement, Tencent said it was “committed to the protection of user privacy and maintaining data security.”
Information sellers post advertisements in the online groups and negotiate with buyers through private messages on QQ or WeChat.
Five sellers offered to sell reporters lists from financial institutions of “people who need loans,” “people who need insurance” and “Shanghainese men aged between 30 to 50.”
The price of such information varied among sellers, ranging from 300 yuan to 2,800 yuan (US$43.68 to US$407.65) for 100,000 people.
A sample list included birth dates, car and home ownership status, and mortgage information, in addition to names and telephone numbers.
Reporters were unable to verify the authenticity of the information.
Three loan agents who sell mortgages for three leading Chinese lenders said customer information was often sold by bank employees.
Some Internet companies also provide access to sensitive personal information for a fee, according to reporters’ communications with two such platforms.
For example, Duoku Technology, a Wuhan-based firm, operates a personal information search platform.
For 5 yuan, Duoku returns the ID picture of any Chinese citizen whose name and ID number are provided. For 3 yuan, the site returns data about a person’s cellphone usage.
Reporters verified that both services worked. The person whose ID photograph was requested did not know how the services obtained his photo or telephone bills.
When asked where Duoku collected or purchased the information, a spokeswoman who identified herself as Ms Li said that much of the data was bought from online merchants and sold to banks and insurance companies.
“Financial institutions use our service for risk-management purposes only,” she said.
Hours after this story was first published, Duoku e-mailed to say their Web site has removed the products set out above and in future would not sell to individuals.
Data privacy has also become a major issue around the world, with companies like Facebook criticized for harvesting and selling users’ personal data.
In China, a proliferation of online financial platforms and users has led to a surge in the sharing of personal data, despite legislative efforts to protect consumers, experts say.
Under current laws, personal information sellers can face up to seven years in prison and a fine, while buying personal data can be punished by fines and up to three years in prison. Corporations are subject to similar legal punishments.
Despite such censure, about 90 percent of phone scams stem from personal information breaches, Union Pay reported in May.
“Central to this problem is the high economic benefits associated with personal information trade and the low costs of violating relevant laws,” Ning said. “For some individuals with authorization, others’ personal information is just a few clicks away.”
Other reasons behind personal data breaches include a lack of security measures on some Web sites and ambiguous terms in certain contracts regarding the use of personal information, Ning said.
“China has a large population and data privacy cases cover a broad range, so it can be quite difficult to investigate,” Ning said.
New guidelines for companies on handling personal data were issued in May that included the hiring of compliance officers and getting explicit consent from consumers when collecting personal information.
The EU’s new rules on privacy protection — the General Data Protection Regulation — took effect the same month.
The EU regulations appear to be more restrictive than the Chinese ones, which allow for silent or implied consent, whereas the European rules do not.
CONFRONTATION: The water cannon attack was the second this month on the Philippine supply boat ‘Unaizah May 4,’ after an incident on March 5 The China Coast Guard yesterday morning blocked a Philippine supply vessel and damaged it with water cannons near a reef off the Southeast Asian country, the Philippines said. The Philippine military released video of what it said was a nearly hour-long attack off the Second Thomas Shoal (Renai Shoal, 仁愛暗沙) in the contested South China Sea, where Chinese ships have unleashed water cannons and collided with Philippine vessels in similar standoffs in the past few months. The China Coast Guard and other vessels “once again harassed, blocked, deployed water cannons, and executed dangerous maneuvers” against a routine rotation and resupply mission to
GLOBAL COMBAT AIR PROGRAM: The potential purchasers would be limited to the 15 nations with which Tokyo has signed defense partnership and equipment transfer deals Japan’s Cabinet yesterday approved a plan to sell future next-generation fighter jets that it is developing with the UK and Italy to other nations, in the latest move away from the country’s post-World War II pacifist principles. The contentious decision to allow international arms sales is expected to help secure Japan’s role in the joint fighter jet project, and is part of a move to build up the Japanese arms industry and bolster its role in global security. The Cabinet also endorsed a revision to Japan’s arms equipment and technology transfer guidelines to allow coproduced lethal weapons to be sold to nations
‘POLITICAL EARTHQUAKE’: Leo Varadkar said he was ‘no longer the best person’ to lead the nation and was stepping down for political, as well as personal, reasons Leo Varadkar on Wednesday announced that he was stepping down as Ireland’s prime minister and leader of the Fine Gael party in the governing coalition, citing “personal and political” reasons. Pundits called the surprise move, just 10 weeks before Ireland holds European Parliament and local elections, a “political earthquake.” A general election has to be held within a year. Irish Deputy Prime Minister Micheal Martin, leader of Fianna Fail, the main coalition partner, said Varadkar’s announcement was “unexpected,” but added that he expected the government to run its full term. An emotional Varadkar, who is in his second stint as prime minister and at
Thousands of devotees, some in a state of trance, gathered at a Buddhist temple on the outskirts of Bangkok renowned for sacred tattoos known as Sak Yant, paying their respects to a revered monk who mastered the practice and seeking purification. The gathering at Wat Bang Phra Buddhist temple is part of a Thai Wai Khru ritual in which devotees pay homage to Luang Phor Pern, the temple’s formal abbot, who died in 2002. He had a reputation for refining and popularizing the temple’s Sak Yant tattoo style. The idea that tattoos confer magical powers has existed in many parts of Asia