《个人信息保护法》（下称“个保法”）正式实施后将会对银行业务，特别是银行数据营销业务带来哪些合规层面的挑战？近日，广州数字金融创新研究院联合主办“羊城数字金融沙龙”论坛第一期活动——“金融行业数据安全治理”学术沙龙顺利开场，讨论人脸识别技术在金融业应用的未来前景将面临的挑战等议题，参会的业内人士认为，金融机构需遵循最小必要原则，审慎使用人脸识别技术。

What compliance challenges will the formal implementation of the personal information protection law (hereinafter referred to as the "personal information protection law") bring to banking business, especially bank data marketing business? Recently, Guangzhou Institute of digital finance innovation co sponsored the first phase of the "Yangcheng digital finance Salon" Forum - "financial industry data security governance" Academic Salon, which successfully opened to discuss the future prospects and challenges of face recognition technology in the financial industry. Industry participants believed that financial institutions should follow the principle of minimum necessity, Careful use of face recognition technology.

人脸识别技术在金融行业应用最为广泛，在个保法实施后会面临怎样的合规挑战？广东广悦律师事务所高级合伙人杨杰律师认为，应用人脸识别时，不仅要考虑便利性，还要考虑安全性。现阶段人脸识别已逐渐取代人工成为金融机构最高级别的认证手段，并被广泛应用。例如，在违规性监控领域，为节约成本、提高便利性，人工监控已经被人脸识别监控替代。这是否符合个保法的最小必要原则值得讨论。

Face recognition technology is most widely used in the financial industry. What compliance challenges will it face after the implementation of the personal insurance law? Lawyer Yang Jie, senior partner of Guangdong Guangyue law firm, believes that when applying face recognition, we should not only consider convenience, but also consider security. At this stage, face recognition has gradually replaced manual as the highest level authentication means of financial institutions, and has been widely used. For example, in the field of violation monitoring, in order to save cost and improve convenience, manual monitoring has been replaced by face recognition monitoring. It is worth discussing whether this is in line with the minimum necessary principle of the personal insurance law.

中南财经政法大学数字经济研究院执行院长、教授盘和林则对人脸数据的安全性提出了不同看法。他表示，相较指纹等个人信息，人脸识别更容易与个人对应，这是人脸识别被广泛普遍关注的原因之一，也是个保法提高人脸识别管制的理由之一。金融机构和类金融机构应界定人脸识别的使用范围，在存在替代方案的情况下，金融机构仍需遵循最小必要原则，审慎使用人脸识别技术。

Pan Helin, executive dean and professor of Digital Economy Research Institute of Central South University of economics and law, put forward different views on the security of face data. He said that compared with personal information such as fingerprints, face recognition is easier to correspond with individuals, which is one of the reasons why face recognition is widely concerned, and it is also one of the reasons to improve the control of face recognition. Financial institutions and similar financial institutions should define the scope of use of face recognition. In the case of alternative schemes, financial institutions still need to follow the principle of minimum necessity and prudently use face recognition technology.

金融行业数据营销、金融科技都使用自动化决策业务，会带来怎样的合规挑战？生活中自动化决策的应用范围已非常广泛，健康码、个税APP等均使用自动化决策提供服务。华南师范大学法学院研究员、数字政府与数字经济法治研究中心主任马颜昕研究员认为，相较精准营销业务，金融机构依托自动化决策开展的金融科技业务受个保法的冲击更大。一方面，个保法的实施将影响金融机构使用金融科技手段进行自动化决策，进而影响贷款审批、逃税监管等业务的开展。另一方面，随着科技的快速发展和个人信用状态的模糊化，大量未持征信牌照的类金融机构也开始利用自动化决策纷纷开展用户信用评估业务，如车险评估及其他各类评估评分等。这是否符合征信业务开展的相关规定，未来又将如何调整，是类金融机构面临的重要挑战。

What compliance challenges will be brought by the use of automated decision-making business in data marketing and financial technology in the financial industry? The application scope of automatic decision-making in life has been very wide. Health code and individual income tax app all use automatic decision-making to provide services. Researcher Ma Yanxin, a researcher at the Law School of South China Normal University and director of the Research Center for digital government and the rule of law of digital economy, believes that compared with precision marketing business, financial technology business carried out by financial institutions relying on automatic decision-making is more impacted by personal insurance law. On the one hand, the implementation of the personal insurance law will affect financial institutions' use of financial technology means for automatic decision-making, and then affect the development of loan approval, tax evasion supervision and other businesses. On the other hand, with the rapid development of science and technology and the fuzziness of personal credit status, a large number of financial institutions without credit investigation licenses also began to use automatic decision-making to carry out user credit evaluation business, such as automobile insurance evaluation and other evaluation scores. Whether this complies with the relevant provisions on the development of credit investigation business and how it will be adjusted in the future are important challenges faced by such financial institutions.

“在人工智能、数字经济快速发展的现代社会，自动化决策不可避免。”盘和林认为，自动化决策的广泛应用会降低社会容忍度、压缩个人生存空间。因此，开展自动化决策时，不仅要考虑效率的提高，也要考虑人性的特征、个人隐私的边界以及弱势群体的生存等问题。政府与企业应厘清个人信息采集、自动化决策应用以及按章执法的边界，允许试错。

"In the modern society with the rapid development of artificial intelligence and digital economy, automatic decision-making is inevitable." Pan Helin believes that the wide application of automatic decision-making will reduce social tolerance and compress personal living space. Therefore, when carrying out automatic decision-making, we should not only consider the improvement of efficiency, but also consider the characteristics of human nature, the boundary of personal privacy and the survival of vulnerable groups. The government and enterprises should clarify the boundaries of personal information collection, automatic decision-making application and law enforcement according to rules, and allow trial and error.