China · Privacy · 21 Jul 2022

China fines Didi RMB 8 billion after year-long cybersecurity review

RMB 8.026 billion fine, plus RMB 1 million each on the CEO and president

Company: Didi Global
Regulator or court: Cyberspace Administration of China
Law: Cybersecurity Law, Data Security Law, Personal Information Protection Law
Status: Final (Didi said it accepted the decision)

What happened

After a cybersecurity review launched days after Didi's US stock listing, China's internet regulator found the ride-hailing company had committed 16 violations over about seven years, including collecting excessive data such as screenshots from users' photo albums. Didi was fined RMB 8.026 billion and its two top executives were fined personally. Its apps had already been pulled from app stores during the review.

Sources

Stanford DigiChina – translation of the CAC announcement Bird & Bird – DiDi case summary

Summary in our own words. General information, not legal advice.

Ready when you are

Could this happen to you? Let’s find out.

Tell me what you’re building. I’ll tell you what you need. No obligation.

Book an intro call

What happened

Coupang hit with Korea's biggest ever privacy fine after insider data leak

GM pays record $12.75m for selling drivers' location and driving data

Saudi Arabia reports 48 penalty decisions as data protection enforcement goes live

Could this happen to you? Let’s find out.