As of today, Didi along with its CEO Liuqing and president Chengwei were fined for violating laws on cybersecurity, data security, and personal data protection.
Didi's violation mainly include the followings:
illegal collecting screenshot information in users' album; and
overly collecting clipboard texts and app lists; and
overly collecting face recognition, age, job data, family relationship data, and home-to-work address data; and
overly collecting GPS data; and
overly collecting divers' education background data; and
processing data analysis as to passenger's travel data without consent; and
frequently call permission when not required; and
failure to clarify the purpose for processing data analysis of another 19 kinds of personal data.
In addition to the above, Didi was also found uncooperative during the investigation.
Didi accepted the decision according to its statement on weibo.