摘 要

在当今互联网+时代的背景下，移动互联网应用(App)随着移动设备的普及而出现，给用户带来了生活便利。但App作为新生事物，其管理规范不甚完善。在国民日益注重个人信息安全的情况下，屡有用户投诉App违法违规收集个人信息，也有大量企业因为信息不合规导致IPO被否甚至涉嫌刑事违法。为了更好地保障企业的利益，同时维护用户的个人信息安全，本论文试图从企业信息合规角度探索App收集用户个人信息的原则与规范，就目前企业收集用户个人信息过程中存在的超范围收集、权限申请目的不明、隐私政策不完善等问题，分析企业收集个人信息的目的与范围，结合国内外的研究与经验，提出有针对性的解决办法。

关键词：个人信息；违法违规收集个人信息；民事责任

Abstract

Under the background of the modern era of Internet +,mobile Internet application (App) with the popularity of mobile devices and appear,convenient brought life to theuser But theAPPas a new thing, the imperfect management norms In the case of national increasingly pay attention to the personal information security, user complaint frequentlyAPPillegal collection of personal information, also have a large number of enterprises because information is not compliance to IPO ever even suspected of criminal law.In order to better protect the interests of the enterprise, at the same time maintain the user's personal information security,this paper attempts to explore from the perspective of enterprise information complianceAPPto collect users' personal information and specification, the principle of current enterprise exists in the process of collecting users' personal information beyond permissions apply for gathering purposes is unknown Privacy policy is not perfect,the objective and scope of the analysis enterprise collecting personal information, combined with the research and experience at home and abroad, put forward a targeted solution.

Key words:Personal information;Illegal collection of personal information; civil liability