Chinese internet users can apply for a virtual ID, according to the regulation, “on a voluntary basis” to verify their identities online without disclosing sensitive personal information, such as national ID numbers, to the platforms.
Chinese internet users can apply for virtual identification on a voluntary basis under the proposed National Cyber ID Authentication regulation. Photo: AFP
Application for a virtual ID involves using an app covered under this proposed regulation to read a person’s physical ID card that supports near-field communication, pass a facial-recognition scan, link a mainland China-registered phone number and then set an eight-digit password.
Apart from ID cards, virtual ID applicants can also use the following: a China passport; mainland travel permit issued to Hong Kong, Macau and Taiwan residents; and a foreign permanent resident ID for non-Chinese nationals living in the country.
According to a survey conducted by the South China Morning Post, popular apps like image-editing platform Meitu, as well as merchant terminals for Alibaba’s Taobao and Tmall, Meituan and ByteDance-owned Douyin, have added a new login option for the virtual ID. Alibaba owns the Post.
Tencent super app WeChat, with more than 1.3 billion monthly active users (MAUs), and Alibaba’s flagship domestic shopping platform Taobao, with more than 887 million MAUs, already allow identity authentication when an account is determined as having “abnormal” usage by the platform, according to a report by ChinaStarMarket, a news site affiliated with the Shanghai municipal government.
The proposed Cyber ID authentication system was designed to reduce the overcollection and retention of users’ personal information by internet platforms. Photo: Bloomberg
While the mainland’s latest initiative reflects its focus on securing domestic data and preventing abuse of personal information collected by apps, legal experts have expressed concerns over the proposed regulation’s implications on privacy and government oversight.
Shen Kui, a law professor at Peking University, acknowledged that a unified network identity could simplify the authentication process during online transactions and make the misuse of personal information less likely.
He cautioned, however, that the idea of mandating a uniform network identity would raise fears of a centralised surveillance system that could comprehensively track and analyse an individual’s online footprint, according to Shen’s published article last month on the WeChat account of the university’s Centre for Constitutional and Administrative Law. This post was later deleted.
Similar concerns were expressed by Lao Dongyan, a criminal law professor at Tsinghua University. She posted on her Weibo account last month that the proposed system implied how accessing online services would effectively become “a privilege that requires permission to enjoy”. As of Thursday, her post was no longer public.