Wang Zhong, Hu Fangru, Su Jie, Lin Yuyao
School of Economics, Guangdong University of Technology, Guangzhou, China.
Key Laboratory of Digital Economy and Data Governance, Guangdong University of Technology, 161 Yinglong Road, Tianhe district, Guangdong province, Guangzhou, 510520, China, 86 18845127665.
JMIR Med Inform. 2024 Dec 10;12:e51219. doi: 10.2196/51219.
During the COVID-19 pandemic, in the period of preventing and controlling the spread of the virus, a large amount of personal data was collected in China, and privacy leakage incidents occurred.
We aimed to examine the information source characteristics of personal data leakage during the COVID-19 pandemic in China.
We extracted information source characteristics of 40 personal data leakage cases using open coding and analyzed the data with 1D and 2D matrices.
In terms of organizational characteristics, data leakage cases mainly occurred in government agencies below the prefecture level, while few occurred in the medical system or in high-level government organizations. The majority of leakers were regular employees or junior staff members rather than temporary workers or senior managers. Family WeChat groups were the primary route for disclosure; the forwarding of documents was the main method of divulgence, while taking screenshots and pictures made up a comparatively smaller portion.
We propose the following suggestions: restricting the authority of nonmedical institutions and low-level government agencies to collect data, strengthening training for low-level employees on privacy protection, and restricting the flow of data on social media through technical measures.
在新冠疫情期间,中国处于防控病毒传播阶段时,收集了大量个人数据,且发生了隐私泄露事件。
我们旨在研究中国新冠疫情期间个人数据泄露的信息源特征。
我们使用开放编码提取了40起个人数据泄露案例的信息源特征,并通过一维和二维矩阵对数据进行分析。
在组织特征方面,数据泄露案例主要发生在地级以下政府机构,而在医疗系统或高级别政府组织中较少发生。大多数泄密者是正式员工或初级职员,而非临时工或高级管理人员。家庭微信群是主要的泄露途径;文件转发是主要的泄露方式,而截图和拍照占比较小。
我们提出以下建议:限制非医疗机构和低级别政府机构收集数据的权限,加强对基层员工的隐私保护培训,并通过技术措施限制社交媒体上的数据流动。