Unverified60% confidenceFactExact time
Under the Personal Information Protection Law and the Data Security Law, third-party software obtaining enterprise communication records requires explicit user authorization, and data processing must meet compliance requirements.
2
Sources
60%
Confidence
Long-term
Relevance
9/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAccess control design in information security distinguishes between authentication (determining who you are) and operation authorization (determining what you can do)73% similarUnverifiedAs long as the platform controls account allocation, users' usage behavior and consumption data will inevitably be recorded through the platform's systems, and not routing through a third-party relay does not mean there is no privacy risk73% similarUnverifiedAccess permissions for every application should be approved and recorded, and approval records serve as compliance audit evidence and the basis for adjudicating permission disputes.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/839465API
curl https://kongchang.com/api/v1/knowledge/claims/839465MCP
get_claim(id=839465)