Authorities in Shanghai have imposed a significant financial penalty on a major online travel company for failing to comply with data security regulations.

The Shanghai Cyberspace Administration announced on the 13th that it has levied an administrative fine of 10 million yuan against Shanghai Ctrip Business Co., Ltd. The penalty was issued in accordance with the Personal Information Protection Law for the company's failure to implement required data export security assessments and for illegally transferring personal information out of the country.

Under the guidance of the national cyberspace regulator, the Shanghai office recently handled a series of enforcement cases concerning local companies. These cases addressed issues such as inadequate fulfillment of primary responsibility for network data security, lack of security management and protective measures, insufficient compliance capabilities for backend data processing, and lax compliance audits for data exports.

Among these cases, Trip.com Group Limited (NYSE: TCOM) was fined 10 million yuan for its specific violations related to data export assessments and personal information transfers. The company was also ordered to rectify the issues within a specified period. Following the penalty, the company has reportedly cooperated actively and fully implemented the required corrective measures.

Enforcement actions this year have revealed that some internet companies in key public service sectors continue to engage in the illegal transfer of personal information abroad. Cyberspace authorities have stated they will further intensify online law enforcement efforts to crack down on various types of online violations. These include actions that endanger network and data security, infringe upon personal information rights, and disrupt economic and social order.