Be alert! Your express bill information is ＂streaking＂ seriously!

During the two sessions this year, Jin Keke, a representative of the Municipal People’s Congress, submitted a proposal on "privacy list". In his view, express delivery companies should implement privacy sheets as soon as possible, implement the legal obligation to protect personal sensitive information, and put a "protective suit" on each personal information attached to the express parcel.

Put on "protective clothing" for personal information attached to express parcels.

With the rapid development of Internet economy, convenient online shopping has become an increasingly important channel for consumers. However, while enjoying the convenience brought by express delivery service, users are also deeply troubled by the problem of personal information leakage:

Today, with the full popularity of express delivery in real-name registration system, a small express delivery list contains all kinds of user information, which makes the express delivery list the hardest hit area for user information leakage and provides the possibility for illegal telecom activities such as online fraud.

"Privacy Sheet" service is not the default.

What is a "privacy sheet"?

Many users have experienced such a courier service, that is, using "asterisk number" or "smiley face number" instead of the middle mobile phone number and user name on the courier list to protect users’ personal privacy information.

As early as 2017, some express delivery companies and express delivery platforms tried to launch "privacy sheets": some "privacy sheets" replaced the middle four digits of the recipient’s mobile phone number with asterisks; Some "privacy sheets" not only do not display the mobile phone number, but also hide the specific address. However, several years have passed, and the popularity of "privacy sheets" is not high. The electronic sheets of parcels received and sent by users still generally show the recipient’s name, telephone number and detailed address completely.

According to the survey in Jin Keke, among the 12 mainstream express delivery companies in the market, only a few express delivery companies provide customers with privacy services.

What is the application of "Privacy Sheet"? The reporter also made some investigations.

On the shelf of a fast bird station on Tianshan Road, the reporter saw more than 40 express parcels, only 5 of which were hidden in the middle of the personal mobile phone number.

According to the staff of the station, in the express delivery he actually received, "privacy sheet" rarely appeared.

In fact, many express delivery companies are still implementing "privacy orders", but the service methods are different.

Companies represented by Tmall Supermarket provide users with "private sticky notes", and users need to stick the stickers on the information they want to hide themselves. A few courier companies list "hide the middle digits of the mobile phone number" and "only display the last name without displaying the first name" as the default options.

However, the "privacy list" service of most courier companies is not the default service, and users should choose this service independently when sending the mail if necessary.

For example, the user information on the general list is not hidden by default. The reporter entered Zhongtong’s WeChat Express applet, chose to make an appointment to send the mail, clicked the "value-added service" option at the bottom of the page and saw the "security number" button. The customer service said that after the "security number" is turned on, part of the printed user information will be replaced by "*".

Users need to check the "security number" in the value-added service to enjoy the privacy face-to-face service.

Yunda Express also requires users to choose the "Privacy Face Sheet" service independently. The reporter opens the delivery page of Yunda Express applet and clicks on the column of "Value-added Services". There are options such as privacy face sheet, payment collection, and return of signature, which the user should actively check, and the default page is not to select privacy face sheet service.

On Taobao, Tik Tok and other live broadcast platforms, when reporters place an order for shopping, most of them don’t have the option of "privacy menu", and they can only hope that the shipper will choose the "privacy menu" service.

The "Privacy Sheet" in value-added services is not the default, so you need to check it actively.

The reporter also interviewed a number of consumers, most of whom said:

The reason why you don’t choose the "privacy face sheet" service is not that you don’t care about information leakage, but that you can’t find the entrance to choose the service, or you have never heard of this service at all.

Increase the risk of personal information disclosure

In the face of information "streaking" express delivery, most consumers’ awareness of self-protection is not strong.

The reporter found that on a small courier list, from the name to the contact information to the address, the information of the sender and the recipient is "at a glance". Some users will tear down the list and destroy it after receiving the courier. Users who don’t care will discard it at will. Especially during the epidemic period, after receiving the express delivery, users mostly throw the outer packaging with the face sheet outdoors for cautious reasons, so that people with ulterior motives can take advantage of it.

The absence of privacy measures for express delivery orders greatly increases the risk of disclosure of personal sensitive information.

According to media reports, a considerable number of criminals have used express delivery forms to collect personal information for various types of illegal and criminal activities. Especially during the epidemic, a large number of elderly people learned to buy daily necessities through e-commerce platforms, and this group is also the most vulnerable to telecom fraud.

Why do express delivery companies hide in the setting of "privacy list"?

In Jin Keke’s view, express delivery companies turn off the option of privacy treatment of face sheets by default, and only provide this service when users take the initiative to choose. In this way, the enterprise will transfer the obligation of privacy treatment of the face sheet to the user.

"Privacy sheets will reduce dispatch efficiency." Jin Keke said that if a courier company implements a privacy sheet, the courier needs to use a specific barcode scanner to scan the corresponding barcode in order to obtain personal information. Compared with when the private face-to-face service is not implemented, it will affect the logistics efficiency to a certain extent, so it will also affect the income of couriers.

The use of privacy sheets is also related to the cost of enterprises. Chai Shanshan, a deputy to the National People’s Congress, has also investigated this issue. He found that when the courier with the privacy sheet is delivered, the courier will have one more process to check the contact phone number in the system, which will affect the delivery efficiency. In the case of the rapid increase of express delivery, the delivery efficiency is reduced, which is bound to increase the staffing, thus increasing the cost of enterprises.

Express delivery enterprises should fulfill the obligation of encryption

The Provisional Regulations on Express Delivery stipulates that express delivery enterprises should properly keep electronic data such as user information, regularly destroy express waybills, and take effective technical measures to ensure the safety of user information.

Article 51 of the Personal Information Protection Law stipulates that personal information processors should take corresponding security technical measures such as encryption and de-identification in the process of processing personal information.

"The courier list contains personal sensitive information, and the above provisions shall apply." Jin Keke believes that according to the provisions of the Personal Information Protection Law, it is a legal obligation to encrypt and privacy user information to avoid the risk of disclosure, and express delivery companies should take the initiative to fulfill it.

"Of course, we must also consider the affordability of corporate costs." Jin Keke suggested:

On the one hand, on the basis of investigation and research, a plan is put forward as soon as possible, requiring express delivery enterprises to take practical measures to fulfill their legal obligations to avoid the disclosure of personal sensitive information; on the other hand, it is necessary to speed up research and provide relevant technical solutions to eliminate the impact of privacy sheets on logistics efficiency as much as possible.

Delegates also suggested strengthening the publicity of personal information protection and strengthening the public’s awareness of personal information security protection.

Source: Shangguan News