According to the deployment of the "Bright Sword Pujiang · 2024" special law enforcement action for the protection of personal information rights and interests in the consumer field, the Shanghai Cyberspace Administration, together with the Shanghai Market Supervision Bureau, organized a special rectification activity on "Personal Information Protection in Coffee Consumption Scenarios".
In May of this year, the Shanghai Cyberspace Administration, in conjunction with the Shanghai Market Supervision Bureau, organized a compliance guidance meeting on "Personal Information Protection in Coffee Consumption Scenarios". Leaders from 24 chain coffee companies, including Starbucks, Luckin Coffee, Manner Coffee, McCafe, Tims Tianhao Coffee, Novak Coffee, COSTA COFFEE, M Stand, Seesaw Coffee, niiice caf é, Peet's Coffee, and Kudi Coffee, participated, involving over 3600 stores in Shanghai.
In June, the "Case Analysis of Illegal Collection and Use of Personal Information in Coffee Consumption Scenarios" of the Shanghai Online Information Office focused on six categories of illegal issues such as mandatory or default consumer consent to the privacy policy, missing, untrue or incomplete privacy policy, mandatory or frequent induction to collect accurate location information, induction to collect mobile phone numbers or follow official account, failure to provide closed targeted push, and failure to provide deletion of personal information channels.
Recently, after a review and inspection by the Shanghai Cyberspace Administration, it was found that Luckin Coffee, Novartis Coffee, and Pacific Coffee COSTA COFFEE、M Stand、 Six enterprises, including One Foot Garden, still have inadequate rectification of problems and have not effectively implemented the relevant requirements of the Personal Information Protection Law. The Shanghai Municipal Administration for Market Regulation requires enterprises to take effective measures to protect the legitimate rights and interests of consumers, implement the relevant requirements of the Consumer Rights and Interests Protection Law and the Implementation Regulations of the Consumer Rights and Interests Protection Law, fulfill the main responsibility of enterprises for protecting consumers' personal information, and effectively carry out lawful and standardized operations.
During the interview, the Shanghai Cyberspace Administration severely criticized six companies for their lack of privacy policies, untrue or incomplete information, forced or frequent inducement to collect accurate location information, forced or induced membership, and failure to provide targeted push closure and other illegal and irregular issues. It required companies to fulfill their personal information protection obligations seriously, implement the "minimum necessary" and "informed consent" principles of personal information processing, and truly achieve clear and complete privacy policies and legal and compliant collection of personal information.
As of press time, brands such as Luckin Coffee and Novartis have not yet responded to this matter.