The public security internet security department imposed administrative penalties on a certain artificial intelligence service technology company in accordance with the law.

The public security network security department found in the special work of "Protecting the Network - 2025" that a technology limited company, which mainly provides basic data for artificial intelligence model training to external parties, did not conduct a personal information protection impact assessment in accordance with the provisions of the Personal Information Protection Law before processing sensitive personal information such as facial recognition. The local public security organs imposed administrative penalties on the company in accordance with the provisions of the Personal Information Protection Law and ordered rectification. Safety reminder: Legitimate and compliant artificial intelligence training data is the cornerstone of high-level large model development. Network data processors providing generative artificial intelligence services should strengthen the security management of training data and training data processing activities, take effective measures to prevent and address network and data security risks. Companies in the industrial chain should take this case as a lesson, comply with the Network Security Law, the Personal Information Protection Law, and the Data Security Law, effectively fulfill their responsibilities for network security, data security, and information security, timely obtain consent when collecting personal information of citizens, conduct personal information protection impact assessment and data export security assessment before delivering data externally, in order to provide higher-level training data security assurance for the high-quality development of the artificial intelligence industry.