China’s top state security authority warns of privacy and data risks from ‘AI relay platforms’ #AI


Photo: WeChat account from Ministry of State Security

China’s Ministry of State Security (MSS) warned on Monday that the rapidly expanding market for “AI relay platforms” currently faces risks that should not be overlooked, including inadequate operating qualifications, weak security protections, frequent privacy leaks and the resale of user data.

An “AI relay platform” acts as an intermediary layer between users and official services provided by AI model developers, according to MSS. As the demand for AI applications surged in recent months, “AI relay platforms” that provide bulk access to both domestic and overseas large language models have rapidly gained popularity in China.

These platforms integrate application programming interfaces from multiple AI model providers into a single platform and offer them to users. An “AI relay platform” functions as an intermediary between users and large models, allowing users to access multiple models more conveniently and meet diverse needs through a one-stop service.

Their advantages include eliminating the need to switch between models, offering relatively low prices, supporting mainstream domestic payment methods and bypassing certain usage restrictions. However, their rapid and loosely regulated expansion has also created a range of security risks.

The MSS warned that such platforms could expose user data and lead to privacy breaches. As third-party gateways, “AI relay platforms” store user-submitted data on their own servers. Some lack proper encryption and data governance mechanisms, while others may retain user data without authorization and resell it to other model developers for training purposes, increasing the risk of privacy leaks.

Some operators, seeking to reduce costs and maximize profits, substitute lower-end models for premium ones, cut computing resources or disable verification functions. These practices may lead to less accurate outputs, weaker logical consistency and could potentially mislead users’ decision-making, said MSS.

In addition, the MSS warned that malicious actors could implant backdoors into some “AI relay platforms” to deliver malicious code onto users’ devices, steal account credentials and cloud access keys, or even deploy remote-control programs for persistent surveillance and data theft.

Some “AI relay platforms” also lack the required compliance qualifications for cross-border data transfers and have failed to complete legally required security assessments before transferring user input data to overseas servers, the MSS said. Such practices could result in leaks of personal privacy, business secrets and even state secrets.

China has continued to signal its determination to improve AI governance frameworks and ensure the technology develops in a safe and responsible manner.

To regulate AI services and applications, promote the healthy and orderly development of the sector, and protect the legitimate rights and interests of citizens, the Cyberspace Administration of China launched a four-month nationwide campaign targeting misconduct and irregularities in AI applications, according to an announcement released on its official website on April 30.

The campaign is centered on regulating AI services and applications, promoting the sector’s healthy and orderly development, and safeguarding the legitimate rights and interests of citizens, the MSS said, adding that ensuring AI security requires not only stronger regulatory oversight and targeted enforcement, but also proactive risk awareness and responsible use by users themselves.

Global Times 



Click Here For The Original Source.

——————————————————–

..........

.

.

National Cyber Security

FREE
VIEW