This article is transferred from [NetEase China];
1、 Q: Could you briefly introduce the background of the promulgation of the Regulations?
A: The formulation of the Regulations is mainly based on the following considerations. First, we will thoroughly implement the decisions and plans of the CPC Central Committee. The Implementation Outline for Building a Society under the Rule of Law (2020-2025) clearly proposes to develop and improve the standardized management methods for the application of new technologies such as algorithm recommendation and deep forgery. The promulgation of the Regulations can further strengthen the management of new technologies, new applications and new formats, coordinate development and safety, and promote the rational and effective use of in-depth synthesis technology according to law. The second is to maintain a good ecosystem of cyberspace. While satisfying user needs and improving user experience, the in-depth synthesis service is also used by some lawbreakers to produce, copy, release and disseminate illegal information, slander and disparage others' reputation and honor, counterfeit others' identities to commit fraud and other illegal acts, affecting the communication order and social order, damaging the legitimate rights and interests of the people, and endangering national security and social stability. The introduction of the Regulations can delineate the "bottom line" and "red line" of in-depth composite services and maintain a good ecosystem of cyberspace. Third, promote the development of in-depth composite service specifications. Implementing laws and administrative regulations such as the Network Security Law, the Data Security Law, the Personal Information Protection Law, and the Internet Information Service Management Measures, and formulating systematic and specialized provisions on the application of in-depth synthesis technology to provide Internet information services can clarify the information security obligations of various subjects and provide a strong legal guarantee for promoting the standardized development of in-depth synthesis services.
2、 Q: What does the term "deep synthesis technology" in the Regulations refer to?
Answer: The deep synthesis technology mentioned in the Regulations refers to the technology of producing network information such as text, image, audio, video and virtual scene by using deep learning, virtual reality and other synthesis algorithms, specifically including the technology of generating or editing text content such as text generation, text style conversion, question and answer dialogue, text to speech, voice conversion Technology for generating or editing voice content such as voice attribute editing, technology for generating or editing non voice content such as music generation and scene sound editing, technology for generating or editing biometrics in images and video content such as face generation, face replacement, character attribute editing, face manipulation, posture manipulation, image generation, image enhancement Image repair and other technologies for generating or editing non biological features in images and video content, 3D reconstruction, digital simulation and other technologies for generating or editing digital characters and virtual scenes, etc.
3、 Q: What are the deep synthesis service providers and technical supporters mentioned in the Regulations?
Answer: The term "deep synthesis service provider" in the Regulations refers to organizations and individuals that provide deep synthesis services. Technical supporters of in-depth synthesis services refer to organizations and individuals that provide technical support for in-depth synthesis services.
4、 Q: What are the requirements of the Regulations for in-depth synthesis service providers to implement the main responsibility of information security?
Answer: The Regulations clearly stipulate the main responsibilities of the in-depth synthesis service provider. First, it is not allowed to use in-depth synthesis services to produce, copy, publish, disseminate information prohibited by laws and administrative regulations, or engage in activities prohibited by laws and administrative regulations. The second is to establish and improve user registration, algorithm mechanism review, science and technology ethics review, information release review, data security, personal information protection, anti telecom network fraud, emergency disposal and other management systems, with safe and controllable technical guarantee measures. The third is to formulate and publicize management rules and platform conventions, improve service agreements, and implement the authentication system of real identity information. The fourth is to strengthen the management of in-depth synthetic content, adopt technical or manual methods to review the input data and synthetic results, establish and improve the feature database used to identify illegal and bad information, record and retain relevant network logs. Fifth, establish and improve the rumor refutation mechanism. If it is found that false information is produced, copied, released and disseminated by using the in-depth synthesis service, it shall take measures to refute rumors in a timely manner, keep relevant records, and report to the online information department and relevant competent departments.
5、 Q: What data and technical management specifications do the Regulations specify for deep synthesis service providers and technical supporters?
A: First, strengthen training data management. Take necessary measures to ensure the safety of training data; If the training data contains personal information, the relevant provisions on the protection of personal information shall be observed; If significant editing function of biometric information such as face and voice is provided, the user shall be prompted to inform the edited individual according to law and obtain his/her separate consent. The second is to strengthen technical management. Regularly review, evaluate and verify the mechanism of generating synthetic algorithms; Those who provide models, templates and other tools with the editing function of biometric information such as face and voice, or special objects, scenes and other non biometric information that may involve national security, national image, national interests and social public interests, shall carry out safety assessment by themselves or entrust professional institutions according to law.
6、 Q: What identification requirements of deep synthesis service providers are specified in the Regulations?
Answer: First, service providers should take technical measures to add marks that do not affect users' use of information generated or edited by using their services, and save log information according to laws and regulations. The second is to provide intelligent dialogue, synthetic voice, face generation, immersive virtual scene and other services with the function of generating or significantly changing information content, which should be marked at a reasonable location and area of the generated or edited information content to remind the public of the composition of information content, so as to avoid confusion or misunderstanding by the public; Those who provide services other than the above in-depth synthesis services shall provide prominent identification functions and prompt users to make prominent identification. No organization or individual may delete, tamper with or conceal relevant marks by technical means.
7、 Q: What filing obligations do the Provisions specify for deep synthesis service providers and technical supporters?
Answer: The Regulations specify that deep composite service providers with the attribute of public opinion or the ability of social mobilization should go through the filing, change and cancellation procedures in accordance with the Regulations on the Management of Internet Information Service Algorithm Recommendation. Technical proponents of deep synthesis services shall refer to service providers to fulfill the filing, change and cancellation procedures. The deep synthesis service provider and technical supporter who have completed the filing shall indicate their filing number and provide a link to the publicity information in a prominent position on the website and application program where they provide services to the outside world.
8、 Q: What requirements does the Regulations put forward for the in-depth synthesis service provider to perform the safety assessment and cooperate with the supervision and inspection obligations?
Answer: The Regulations specify that if a deep synthesis service provider develops new products, new applications and new functions with public opinion attribute or social mobilization ability, it should carry out safety assessment in accordance with relevant national regulations. The deep synthesis service provider and technical supporter shall cooperate with the supervision and inspection carried out by the network information department and relevant competent departments according to law, and provide necessary technical, data and other support and assistance. If it is found that there is a large information security risk, the network information department and the relevant competent department may, according to their duties and laws, require them to take measures such as suspending information updates, user account registration or other services.
