⌘K
Change language Switch ThemeSign In
Narrow Mode
“举报后个人信息秒泄”：政务系统当保护投诉人 ======================
!Image 7: 南方周末 南方周末 @南方周末
One Sentence Summary
Addressing the incident of a whistleblower's information leak in Shanghai, the article calls for government service systems to adopt mature technologies from the internet industry and strictly adhere to the 'Principle of Minimal Necessity' to strengthen personal information protection.
Summary
This article uses the hot social issue of 'a Shanghai homeowner's information being instantly leaked after reporting illegal construction' as a starting point to deeply analyze the privacy security vulnerabilities present in government hotlines during the service request transfer process. The author points out that the multi-layered forwarding of complaint information between government departments and property management companies, leading to excessive personnel access, is the core reason for privacy leaks. The article proposes two practical improvement suggestions: On the technical front, it suggests introducing 'virtual numbers' and two-way encryption technologies, already prevalent in e-commerce and ride-hailing industries, to achieve physical isolation between complainants and case handlers; on the institutional front, it calls for a reconsideration of the necessity of mandatory real-name reporting, strict enforcement of the 'Principle of Minimal Necessity' from the Personal Information Protection Law, and avoidance of collecting unnecessary sensitive information. The article emphasizes that public sectors should lead by example in digital governance, protecting citizens' legitimate rights and interests through dual upgrades in technology and institutions.
Main Points
* 1. Excessive circulation steps in government service request tickets are a systemic risk point leading to the leakage of whistleblower privacy.Complaint information flows from the hotline platform to the competent authority and then to grassroots executive units (e.g., property management), involving a long chain of circulation and lacking access control, resulting in a large number of irrelevant personnel having access to sensitive information. * 2. Mature technical means such as 'virtual numbers' should be introduced to achieve privacy anonymization in government communications.Drawing on the experience of the e-commerce and ride-hailing industries, assigning temporary virtual numbers for two-way encrypted communication can ensure work contact while automatically unbinding after the service request is closed, thus blocking leakage paths. * 3. Government service systems should strictly adhere to the 'Principle of Minimal Necessity' as stipulated in the Personal Information Protection Law.Reconsider the rationality of mandatory real-name reporting. For easily verifiable matters like illegal construction, anonymous reporting or retaining only phone contact information should be allowed, reducing the collection of high-value sensitive information such as names and addresses.
Metadata
AI Score
80
Website mp.weixin.qq.com
Published At Today
Length 1863 words (about 8 min)
Sign in to use highlight and note-taking features for a better reading experience. Sign in now
原创 王兢 2026-03-15 14:52 广东
!Image 10 ▲（视觉中国/图）
全文共1717字，阅读大约需要14分钟
* 包括政务热线在内的公共部门应慎之又慎、以身作则，严守“最小必要”原则，更好地保护公民个人信息。受理投诉举报的政务系统，也应遵守个人信息保护法的规定，对收集投诉举报者个人信息，要遵循“最小必要”原则。 本文首发于**南方周末 未经授权 不得转载****
文｜王兢
责任编辑｜辛省志
近日引起广泛关注的“上海业主举报违建后个人信息被秒泄”一事有了新的进展。据东方网2026年3月12日报道，涉事小区物业经理贺某某已被上海警方依法行政处罚。
据媒体此前报道，2月24日，家住宝山区乾泽园小区的邱先生发现，小区一栋楼的楼顶盖了块黑布，疑似存在违法搭建行为。当天中午，邱先生通过12345手机平台进行了实名举报，并按要求留下了姓名、住址、电话等信息。然而第二天下午，还没接到相关部门的回复，邱先生先接到了一陌生女子的电话，“直接问我是不是举报了她”。
邱先生表示，这名素未谋面的“邻居”不仅有他的电话，还有他的家庭住址信息，更能一字不差地读出举报工单上的全部内容，甚至连他的下班时间、亲属信息都有。被举报人不仅不谈信息来源，反而嚣张地表示“当天投诉，十分钟就知道了”。感到“大为震撼”的邱先生当天报警，并再次通过12345平台投诉信息泄露，“现在不敢回家”。
据最新报道，泄露邱先生信息的，是涉事小区物业经理贺某某。贺某某表示，投诉信息转派给物业公司后，物业公司再派给了他。贺某某随后联系了被投诉人的儿子，并向其称该投诉人也一直投诉他，“语言中我对投诉人有点不满，可能这句话泄露了”。
不管是有意还是无意，贺某某把投诉人的信息提供给了被投诉人亲属，导致投诉人被骚扰甚至被恐吓，已经违反了法律规定，自然应该受到法律的惩罚。根据《中华人民共和国治安管理处罚法》第五十六条，“违反国家有关规定，向他人出售或者提供个人信息的，处十日以上十五日以下拘留；情节较轻的，处五日以下拘留。”而如果情节严重，甚至可能触犯刑法。
这一事件，也令人反思政务热线在处理市民投诉举报时，是否可以更好地保护举报人的个人信息。政务热线接到投诉举报，会把举报的问题层层转发给主管的部门，由工作人员进行核实处理。在这个过程中，一个工单会被派给很多部门，很多环节上的人都可能接触到工单。如果工单上有投诉人的信息，即使只有姓氏和电话，但到了具体场景中，往往也足以锁定投诉人的身份，何况电话本身就属于敏感的个人信息，可以直接联系到投诉人。
政务热线在转办投诉工单时，是否可以不转发投诉人的任何个人信息，而只转发待核实处理的事项本身？如果具体办理的工作人员确实有必要联系投诉人，那也可以就每个工单给投诉人分配一个虚拟电话号码，工作人员可以通过政务热线拨打这个虚拟电话号码联系到投诉人。其他的电话，则无法直接拨打虚拟电话号码。工单结束后，这个虚拟电话号码即被收回，与投诉人本人的电话号码解绑。这在技术上并不难实现，电商快递、网约车等领域，为了保护用户隐私，已经普遍采用了虚拟电话号码的方式。电话号码双向加密，有助于保护各方的个人信息。
进一步，投诉举报是否有必要事事都实名？如今在互联网上，每隔一段时间就会出现手持身份证录视频的“实名公开举报”，这种举报也往往会成为网络热点。反过来想，如果正常渠道就能解决问题，人们是否还需要如此大费周章？
如果说网上的公共实名举报是当事人自愿的选择，那政务系统的投诉举报则是强制要求实名的，这就值得商榷。《中华人民共和国个人信息保护法》规定，获取与处理公民个人信息就应遵循“最小必要”的原则，并且需要保障数据安全与隐私。受理投诉举报的政务系统，也应遵守个人信息保护法的规定，对收集投诉举报者个人信息，要遵循“最小必要”原则。在电话号码已经实行实名制的情况下，有电话号码就可以找到举报人，没有必要再填写姓名、身份证号码等敏感信息。
有声音认为，实名举报才会增加举报的可信度，让举报人用自己的信用为其背书。不过有些举报投诉事项，并不需要联系投诉举报人就能核实。比如上海这起违建事件，小区里光天化日之下的违建翻新，不难发现更不难核实，是否还需要邱先生冒着信息泄露、被打击报复的风险，实名填写自己的个人信息？如果调查发现举报属实，那该怎么处理就怎么处理，最后向举报人发个信息通报处理结果就行了。即使调查发现举报不属实，要追究举报者诬告陷害的责任，执法机关要通过电话号码找到举报人也不是什么难事。
包括政务热线在内的公共部门更应慎之又慎、以身作则，严守“最小必要”原则，更好地保护公民个人信息。
其他人都在看   阅读原文 跳转微信打开
!Image 13: 南方周末 南方周末 @南方周末
One Sentence Summary
Addressing the incident of a whistleblower's information leak in Shanghai, the article calls for government service systems to adopt mature technologies from the internet industry and strictly adhere to the 'Principle of Minimal Necessity' to strengthen personal information protection.
Summary
This article uses the hot social issue of 'a Shanghai homeowner's information being instantly leaked after reporting illegal construction' as a starting point to deeply analyze the privacy security vulnerabilities present in government hotlines during the service request transfer process. The author points out that the multi-layered forwarding of complaint information between government departments and property management companies, leading to excessive personnel access, is the core reason for privacy leaks. The article proposes two practical improvement suggestions: On the technical front, it suggests introducing 'virtual numbers' and two-way encryption technologies, already prevalent in e-commerce and ride-hailing industries, to achieve physical isolation between complainants and case handlers; on the institutional front, it calls for a reconsideration of the necessity of mandatory real-name reporting, strict enforcement of the 'Principle of Minimal Necessity' from the Personal Information Protection Law, and avoidance of collecting unnecessary sensitive information. The article emphasizes that public sectors should lead by example in digital governance, protecting citizens' legitimate rights and interests through dual upgrades in technology and institutions.
Main Points
* 1. Excessive circulation steps in government service request tickets are a systemic risk point leading to the leakage of whistleblower privacy.
Complaint information flows from the hotline platform to the competent authority and then to grassroots executive units (e.g., property management), involving a long chain of circulation and lacking access control, resulting in a large number of irrelevant personnel having access to sensitive information.
* 2. Mature technical means such as 'virtual numbers' should be introduced to achieve privacy anonymization in government communications.
Drawing on the experience of the e-commerce and ride-hailing industries, assigning temporary virtual numbers for two-way encrypted communication can ensure work contact while automatically unbinding after the service request is closed, thus blocking leakage paths.
* 3. Government service systems should strictly adhere to the 'Principle of Minimal Necessity' as stipulated in the Personal Information Protection Law.
Reconsider the rationality of mandatory real-name reporting. For easily verifiable matters like illegal construction, anonymous reporting or retaining only phone contact information should be allowed, reducing the collection of high-value sensitive information such as names and addresses.
Key Quotes
* Government systems that handle complaints and reports should also comply with the provisions of the Personal Information Protection Law, adhering to the 'Principle of Minimal Necessity' when collecting personal information from complainants and whistleblowers. * Technically, it's not difficult to implement. Industries like e-commerce delivery and ride-hailing have widely adopted virtual phone numbers to protect user privacy. * Public sectors, including government hotlines, should be even more cautious and lead by example, strictly adhering to the 'Principle of Minimal Necessity' to better protect citizens' personal information. * If the staff handling a specific case indeed needs to contact the complainant, a virtual phone number can be assigned to the complainant for each service request.
AI Score
80
Website mp.weixin.qq.com
Published At Today
Length 1863 words (about 8 min)
Tags
Personal Information Protection
Digital Governance
Government Hotlines
Data Security
Privacy Protection
Related Articles
* High-performance envelope encryption at Ariso.ai with Vault * 11-Day Live Test of 200 Wealth Management Products: Over 1/3 Showcase the Most Enticing Returns * Doubao Phone! Is GUI Agent a Real Revolution or a Step Backward? | An In-depth Conversation with Zhang He * E224 | Deep Dive into Clawdbot: Why It Became the First Phenomenal Product of 2026? * 2026-02-07 Hacker News Top Stories # HomeArticlesPodcastsVideosTweets
Personal Information Leaked Instantly After Reporting: Go... ===============