Securities firms will classify and grade investors' personal information

The China Securities Association recently released the "Technical Specifications for the Protection of Personal Information of Investors by Securities Companies" group standard. Zhongtai Securities, Caixin Securities, WanLian Securities, Guotai Junan, Northeast Securities, Guolian Minsheng, and China Merchants Securities participated in its formulation, aiming to further protect the legitimate rights and interests of investors and regulate the handling of investors' personal information. The "Specifications" indicate that, based on business characteristics, securities firms should classify investors' personal information according to the principles of compliance, executability, timeliness, autonomy, rationality, and objectivity. This includes categorizing investors' personal information into four levels (Level 4, Level 3, Level 2, Level 1) based on the impact and harm caused by breaches of information security, with sensitive personal information of investors generally defined as Level 3 and above. Additionally, specific application requirements are highlighted in six typical business scenarios in conjunction with the actual securities business