How do commercial banks protect personal information security?

Commercial banks are both information providers and users in the credit information system, and bear the responsibility of protecting personal information security. In terms of information collection and use, commercial banks have their own rules and regulations and compliance procedures to ensure the safety of personal information.

Su Zongguo, general manager of the Management Information Department of China Industrial and Commercial Bank, said that ICBC should obtain personal consent and authorization when collecting and submitting personal information from credit reporting agencies, and obtain personal authorization when inquiring about personal information, and explain the purpose in the authorization.

For the use of internal bank credit information, ICBC has established a white list system. Su Zongguo introduced that there are more than 200 users in the white list of ICBC branches. Only these people can log on to the credit information system of China People's Bank for inquiry, but they can only handle personal objections or manage users.

For information users within the bank, ICBC has also established a front-end system. "The system is connected with the credit information system of the People's Bank of China, and users of the system must pass the credit information security test. The metaphor of the image is' driving test', and they can only enter by passing the exam. " When operating the system, you also need to pass the double password authentication.

In terms of strengthening system monitoring, Su Zongguo said that ICBC will conduct real-time monitoring on information inquiry without business background, inquiry during non-working hours, excessive inquiry and overdue storage of statements. Once the system finds the violation and gives an alarm automatically, the administrator will check it in time and hand it over to the user's superior for verification.