行长周小川
二00五年8月18日
个人信用信息基础数据库管理暂行方法
第一章总则
第一条为维护金融稳定，防范和减少商业银行的信用风险，促进个人信贷业务的进步，保障个人信用信息的安全和合法用，依据《中华人民共和国中国人民银行法》等有关法律规定，拟定本方法。
第二条中国人民银行负责组织商业银行打造个人信用信息基础数据库（以下简称个人信用数据库），并负责设立征信服务中心，承担个人信用数据库的平时运行和管理。
第三条个人信用数据库采集、整理、保存个人信用信息，为商业银行和个人提供信用报告查看服务，为货币政策拟定、金融监管和法律、法规规定的其他作用与功效提供有关信息服务。
第四条本方法所称个人信用信息包含个人基本信息、个人信贷买卖信息与反映个人信用情况的其他信息。
前款所称个人基本信息是指自然人身份辨别信息、职业和居住地址等信息；个人信贷买卖信息是指商业银行提供的自然人在个人贷款、贷记卡、准贷记卡、担保等信用活动中形成的买卖记录；反映个人信用情况的其他信息是指除信贷买卖信息以外的反映个人信用情况的有关信息。
第五条中国人民银行、商业银行及其员工应当为在工作中了解的个人信用信息保密。
第二章报送和整理
第六条商业银行应当遵守中国人民银行发布的个人信用数据库标准及其相关需求，准确、完整、准时地向个人信用数据库报送个人信用信息。
第七条商业银行不能向未经信贷征信主管部门批准打造或变相打造的个人信用数据库提供个人信用信息。
第八条征信服务中心应当打造健全的规章规范和采取一流的技术方法确保个人信用信息安全。
第九条征信服务中心依据生成信用报告的需要，对商业银行报送的个人信用信息进行客观整理、保存，不能擅自更改原始数据。
第十条征信服务中心觉得有关商业银行报送的信息可疑时，应当按有关规定的程序准时向该商业银行发出复核公告。
商业银行应当在收到复核公告之日起5个工作日内给予回话。
第十一条商业银行发现其所报送的个人信用信息不准确时，应当准时报告征信服务中心，征信服务中心收到纠错报告应当立即进行更正。
第三章查看
第十二条商业银行办理下列业务，可以向个人信用数据库查看个人信用报告：
（一）审核个人贷款申请的；
（二）审核个人贷记卡、准贷记卡申请的；
（三）审核个人作为担保人的；
（四）对已发放的个人信贷进行贷后风险管理的；
（五）受理法人或其他组织的贷款申请或其作为担保人，需要查看其法定代表人及出资人信用情况的。
第十三条除本方法第十二条第（四）项规定以外，商业银行查看个人信用报告时应当获得被查看人的书面授权。书面授权可以通过在贷款、贷记卡、准贷记卡与担保申请书中增加相应条约获得。
第十四条商业银行应当拟定贷后风险管理查看个人信用报告的内部授权规范和查看管理程序。
第十五条征信服务中心可以参考个人申请有偿提供其本人信用报告。
征信服务中心应当拟定相应的处置程序，核实申请人身份。
第四章异议处置
第十六条我认为本人信用报告中的信用信息存在错误（以下简称异议信息）时，可以通过所在地中国人民银行征信管理部门或直接向征信服务中心提出书面异议申请。
中国人民银行征信管理部门应当在收到异议申请的2个工作日内将异议申请转交征信服务中心。
第十七条征信服务中心应当在接到异议申请的2个工作日内进行内部核查。
征信服务中心发现异议信息是因为个人信用数据库信息处置过程导致的，应当立即进行更正，并检查个人信用数据库处置程序和操作流程存在的问题。
第十八条征信服务中心内部核查未发现个人信用数据库处置过程存在问题的，应当立即书面公告提供有关信息的商业银行进行核查。
第十九条商业银行应当在接到核查公告的10个工作日内向征信服务中心作出核查状况的书面回话。异议信息确实有误的，商业银行应当采取以下手段：
（一）应当向征信服务中心报送更正信息；
（二）检查个人信用信息报送的程序；
（三）对后续报送的其他个人信用信息进行检查，发现错误的，应当重新报送。
第二十条征信服务中心收到商业银行重新报送的更正信息后，应当在2个工作日内对异议信息进行更正。
异议信息确实有误，但因技术缘由暂时没办法更正的，征信服务中心应当对该异议信息作特殊标注，以有别于其他异议信息。
第二十一条经过核查，没办法确认异议信息存在错误的，征信服务中心不能根据异议申请人需要更改有关个人信用信息。
第二十二条征信服务中心应当在同意异议申请后15个工作日内，向异议申请人或转交异议申请的中国人民银行征信管理部门提供书面回话；异议信息得到更正的，征信服务中心同时提供更正后的信用报告。
异议信息确实有误，但因技术缘由暂时没办法更正异议信息的，征信服务中心应当在书面回话中予以说明，待异议信息更正后，提供更正后的信用报告。
第二十三条转交异议申请的中国人民银行征信管理部门应当自接到征信服务中心书面回话和更正后的信用报告之日起2个工作日内，向异议申请人转交。
第二十四条对于没办法核实的异议信息，征信服务中心应当允许异议申请人对有关异议信息附注100字以内的个人声明。个人声明不能包括与异议信息无关的内容，异议申请人应当对个人声明的真实性负责。
征信服务中心应当妥善保存个人声明原始档案，并将个人声明载入异议人信用报告。
第二十五条征信服务中心应当对处于异议处置期的信息予以标注。
第五章安全管理
第二十六条商业银行应当依据中国人民银行的有关规定，拟定有关信用信息报送、查看、用、异议处置、安全管理等方面的内部管理规范和操作流程，并报中国人民银行备案。
第二十七条商业银行应当打造用户管理规范，明确管理员用户、数据上报用户和信息查看用户的职责及操作流程。
商业银行管理员用户、数据上报用户和查看用户不能互相兼职。
第二十八条商业银行管理员用户应当依据操作流程，为得到有关授权的职员创建相应用户。管理员用户不能直接查看个人信用信息。
管理员用户应当加大对同级查看用户、数据上报用户与下一级管理员用户的平时管理。查看用户员工调离，该用户应当立即予以停用。
第二十九条商业银行管理员用户、数据上报用户和查看用户须报中国人民银行征信管理部门和征信服务中心备案。
前款用户员工发生变动，商业银行应当在2个工作日内向中国人民银行征信管理部门和征信服务中心变更备案。
第三十条商业银行应当拟定管理员用户和查看用户的口令控制规范，并按期检查口令控制实行状况。
第三十一条商业银行应当打造保证个人信用信息安全的管理规范，确保只有得到内部授权的职员才能接触个人信用报告，不能将个人信用报告用于本方法第十二条规定以外的其它作用与功效。
第三十二条征信服务中心应当拟定信用信息采集、整理、保存、查看、异议处置、用户管理、安全管理等方面的管理规范和操作流程，明确职位职责，健全内控规范，保障个人信用数据库的正常运行和个人信用信息的安全。
第三十三条征信服务中心及其员工不能违反法律、法规及本方法的规定，篡改、毁损、泄露或非法用个人信用信息，不能与自然人、法人、其它组织恶意串通，提供不真实信用报告。
第三十四条征信服务中心应当打造个人信用数据库内部运行和外部访问的监控规范，监督个人信用数据库用户和商业银行用户的操作，防范对个人信用数据库的非法入侵。
第三十五条征信服务中心应当打造灾难备份系统，采取必要的安全保障手段，预防系统数据丢失。
第三十六条征信服务中心应当对商业银行的所有查看进行记录，并准时向商业银行反馈。
第三十七条商业银行应当常常对个人信用数据库的查看状况进行检查，确保所有查看符合本方法的规定，并按期向中国人民银行及征信服务中心报告查看检查结果。
征信服务中心应当按期核查商业银行对个人信用数据库的查看状况。
第六章罚则
第三十八条商业银行未根据本方法规定打造相应管理规范及操作流程的，由中国人民银行责令改正，逾期不改正的，给予警告，并处以三万元罚款。
第三十九条商业银行有下列情形之一的，由中国人民银行责令改正，并处一万元以上三万元以下罚款；涉嫌犯罪的，依法移交司法机关处置：
（一）违反本方法规定，未准确、完整、准时报送个人信用信息的；
（二）违反本方法第七条规定的；
（三）越权查看个人信用数据库的；
（四）将查看结果用于本方法规定以外的其他目的的；
（五）违反异议处置规定的；
（六）违反本方法安全管理需要的。
第四十条商业银行有本方法第三十八条至第三十九条规定情形的，中国人民银行可以建议商业银行对直接负责的董事、高级管理职员和其他直接责任职员给予纪律处分；涉嫌犯罪的，依法移交司法机关处置。
第四十一条征信服务中心员工有下列情形之一的，由中国人民银行依法给予行政处分；涉嫌犯罪的，依法移交司法机关处置：
（一）违反本方法规定，篡改、毁损、泄露或非法用个人信用信息的；
（二）与自然人、法人、其它组织恶意串通，提供不真实信用报告的。
第四十二条中国人民银行其他员工有违反本方法规定的行为，导致个人信用信息被泄露的，依法给予行政处分；涉嫌犯罪的，依法移交司法机关处置。
第七章附则
第四十三条本方法所称商业银行，是指在中华人民共和国境内设立的商业银行、城市信用合作社、农村信用合作社与经国务院银行业监督管理机构批准的专门从事信贷业务的其他金融机构。
第四十四条本方法由中国人民银行负责讲解。
第四十五条本方法自2005年十月1日起实行。
Interim1 Measures for the Administration of the Basic Data of Inpidual Credit Information
Promulgation2 date: 08-18-2005
Effective date: 10-01-2005
Order of the People's Bank of China
（Order No.3 [2005]）
According to the relevant laws and regulations such as the Law of the People's Republic of China on the People's Bank of China, the People's Bank of China has formulated4 the Interim Measures for the Administration of the Basic Data of Inpidual Credit Information, which were adopted at the 11th president's executive meeting of the People's Bank of China on June 16, 2005, are hereby promulgated5 and shall come into force as of October 1, 2005.
President Zhou Xiaochuan
August 18, 2005
Interim Measures for the Administration of the Basic Data of Inpidual Credit Information
Chapter I General Provisions
Article 1 The present measures are formulated according to the relevant laws and regulations such as the Law of the People's Republic of China on the People's Bank of China in order to safeguard the financial stability, prevent and lower the credit risk of commercial banks, promote the development of inpidual credit business and safeguard the security of inpidual credit information as well as the legal use thereof.
Article 2 The People's Bank of China shall take charge of organizing commercial banks to establish the basic data of inpidual credit information （hereinafter referred to as the inpidual information data）, and shall take charge of establishing the service center of credit investigation6 as well as the daily operation and management of the inpidual information data.
Article 3 The inpidual information data shall collect, straighten out and record inpidual credit information, provide the service of credit reports inquiry7 for commercial banks and inpiduals and provide the relevant information services for the formulation of monetary8 policies, financial supervision9 and administration as well as any other purpose as prescribed by any law or regulation.
Article 4 The term inpidual credit information as mentioned in the present Measures covers basic inpidual information, inpidual information on loans and transactions and any other information that may reflect the inpidual credit situation.The term basic inpidual information as mentioned in the preceding paragraph refers to such information as the identity information of a natural person, career and habitation address. The term inpidual information on loans and transactions refers to the transactional records as provided by commercial banks, which are formed in the credit activities of natural persons such as loans, credit cards, 百度竞价推广i credit cards and guaranty. The term any other information that may reflect the inpidual credit situation refers to the relevant information that reflects the inpidual credit information, apart from the information on loans and transactions.
Article 5 The People's Bank of China, commercial banks and the work staff thereof shall keep confidential10 the inpidual credit information as known in the relevant work.
Chapter II Report and Straightening-out
Article 6 The commercial banks shall observe the standards of the inpidual credit data as well as the relevant requirements thereof as announced by the People's Bank of China and report the inpidual credit information to the inpidual credit data in an accurate, complete and timely manner.
Article 7 The commercial banks shall not provide any inpidual credit information to any inpidual credit data that fails to be established upon the approval of the administrative11 department of credit investigation or is established in any disguised form.
Article 8 The service center of credit investigation shall establish perfect rules and regulations and adopt advanced technical means to ensure the security of inpidual credit information.
Article 9 The service center of credit investigation shall, according to the requirements of credit report, carry out objective straightening-out and storage for the inpidual credit information as reported by commercial banks and shall not unlawfully alter any original data.
Article 10 The service center of credit investigation shall, where having any doubt about the information as reported by a commercial bank, send a review notice to the relevant commercial bank according to the relevant procedures as prescribed in a timely manner.
The relevant commercial bank shall give a reply within 5 workdays as of the day when it receives the review notice.
Article 11 Where a commercial bank finds that the inpidual credit information it has reported is inaccurate12, it shall report it to the service center of credit investigation in a timely manner. The service center of credit investigation shall immediately make correction upon receiving the error-correcting report.
Chapter III Inquiry
Article 12 Where a commercial bank handles the following business operations, it may inquire about the relevant inpidual credit report in the inpidual credit data:
（1） Examining an application for inpidual loan;
（2） Examining an application for inpidual credit card or 百度竞价推广i-credit card;
（3） Examining an inpidual to be a guarantor;
（4） Carrying out post-loan risk management for any inpidual loan as granted; or
（5） Accepting the application of a legal person or any other organization for a loan or being a guarantor, which requires the inquiry of the credit information of the legal-person and capital contributor.
Article 13 Apart from the provisions of item （4） of Article 12 of the present Measures, a commercial bank shall obtain a written authorization13 from the inquired person before carrying out any inquiry about the inpidual credit report. The written authorization may be required by means of adding the relevant article to an application for a loan, credit card, 百度竞价推广i-credit card or guaranty.
Article 14 A commercial bank shall establish an internal authorization system of inquiring about the inpidual credit report for post-loan risk management and the procedures for the inquiry management.
Article 15 The service center of credit investigation may, according to an inpidual's application, provide the paid inpidual credit report of the applicant14.
The service center of credit investigation shall formulate3 the corresponding handling procedures and verify the identity of the relevant applicant.
Chapter IV Treatment of Demurrals
Article 16 Where an inpidual believes that there is any mistake of credit information in his credit report （hereinafter referred to as the information with demurral）, he may file a written application of demurral directly with the service center of credit investigation or through the administrative department of credit investigation of the People's Bank of China where it is located.
The administrative department of credit investigation of the People's Bank of China shall, within 2 workdays as of receiving an application of demurral, forward the demurral to the service center of credit investigation.
Article 17 The service center of credit investigation shall carry out an internal verification within 2 workdays as of receiving an application of demurral.
Where the service center of credit investigation finds that the information with demurral is caused in the procedures for handling the information of the inpidual credit data, it shall immediately make correction and examine the existing problem in the handling procedures or operating procedures of the inpidual credit data.
Article 18 Where the service center does not find any problem in the handling procedures of the inpidual credit data in the internal verification, it shall immediately inform the commercial bank that has provided the relevant information to make verification in written form.
Article 19 A commercial bank shall, within 10 workdays as of receiving a verification notice, make a written reply on the verification to the service center of credit investigation. Where there does exist any mistake of information with demurral, a commercial bank shall take the following measures:
（1） Reporting the corrected information to the service center of credit investigation;
（2） Examining the procedures for reporting the inpidual credit investigation; and
（3） Carrying out an examination on the other succeeding inpidual credit information and in the case of any mistake, making a new report.
Article 20 The service center of credit investigation shall, within 2 workdays as of receiving the corrected information as newly reported by a commercial bank, correct the information with demurral.
For any information with demurral that has any virtual mistake but can not be corrected due to any technical reason for the time being, the service center of credit investigation shall make a special mark for the said information with demurral so that it may be distinguished15 from any other information with demurral.
Article 21 Upon verification, where the existing mistake of information with demurral cannot be /confirm/ied, the service center of credit investigation shall not alter the relevant inpidual credit information according to the requirements of the applicant who has filed the demurral.
Article 22 The service center of credit investigation shall, within 15 workdays as of receiving an application of demurral, provide a written reply to the applicant who has filed the demurral or the administrative department of credit investigation of the People's Bank of China that has forwarded the application of demurral. Where the information with demurral is corrected, the service center of credit investigation shall, at the same time, provide the corrected credit report.
For the information with demurral that has a virtual mistake but cannot be corrected due to any technical reason for the time being, the service center of credit investigation shall give an explanation in its written reply and shall, upon the correction of the information with demurral, provide the corrected credit report.
Article 23 The administrative department of credit investigation of the People's Bank of China that has forwarded the application of demurral shall, within 2 workdays as of receiving the written reply and the corrected credit report from the service center of credit investigation, forward it to the relevant applicant who has filed the demurral.
Article 24 For any information with demurral that cannot be verified, the service center of credit investigation shall allow the applicant who has filed the demurral to annotate16 a personal statement on the information with demurral within 100 words. The personal statement shall not include any content that is irrelevant17 to the information with demurral and the applicant who has filed the demurral shall be responsible for the authenticity18 thereof.
The service center of credit investigation shall keep the original archive of the personal statement in a proper manner and shall incorporate the personal statement into the credit report of the person who files the demurral.
Article 25 The service center of credit investigation shall mark the information that is in the demurral treatment process.
Chapter V Security Management
Article 26 A commercial bank shall, according to the relevant provisions of the People's Bank of China, formulate the internal management system and operating procedures in such aspects as report, inquiry, use, demurral treatment and security management of credit information and shall report them to the People's Bank of China for archival filing.
Article 27 A commercial bank shall establish a user management system, clarifying the functions and duties of administrator19 users, data report users and information inquiry users as well as the operating procedures.
No one may concurrently20 hold the posts of an administrator user, data report user or inquiry user.
Article 28 An administrator user of a commercial bank shall, according to the operating procedures, establish the corresponding users for the relevant authorized21 person. An administrator user shall not make any direct inquiry on inpidual credit information.
An administrator user shall intensify22 the daily administration of the inquiry users and data report users at the same level as well as the administrator users at a lower level. Where any work staff of an inquiry user is transferred, the user account shall be terminated immediately.
Article 29 The administrator users, data report users and information inquiry users of commercial banks shall be reported to the administrative department of credit investigation of the People's Bank of China and the service center of credit investigation for archival filing.
In the case of any alteration23 of the user work staff as prescribed in the preceding paragraph, a commercial bank shall report it to the administrative department of credit investigation of the People's Bank of China and the service center of credit investigation for archival filing within 2 workdays.
Article 30 A commercial bank shall establish a password controlling system for administrator users and inquiry users and shall carry out an examination on the implementation24 of the password control on a periodic base.
Article 31 A commercial bank shall establish a management system of guaranteeing the security of inpidual credit information so as to ensure that only internal authorized personnel may contact the inpidual credit report, and shall not use the inpidual credit report for any other purpose beyond those as prescribed by Article 12 of the present Measures.
Article 32 The service center of credit investigation shall formulate the management system and operating procedures in such aspects as the collection, straightening-out, storage, inquiry, demurral treatment, users' management and security management to clarify the functions and duties of all posts, improve the internal control system and guarantee the normal operation of the inpidual credit data and the security of inpidual credit information.
Article 33 The service center of credit investigation and the personnel thereof shall not violate the provisions of any law or regulation or the present Measures by altering, damaging, pulging25 or unlawfully using any inpidual credit information and shall not viciously collude with any natural person, legal person or any other organization to provide any false credit report.
Article 34 The service center of credit investigation shall establish a supervisory and controlling system regarding the internal operation and external visit of the inpidual credit data to supervise the operations as conducted by users of the inpidual credit data as well as commercial banks and prevent any illegal invasion into the inpidual credit data.
Article 35 The service center of credit investigation shall establish a spare system for disasters and take necessary measures for security and guaranty so as to prevent any loss of data.
Article 36 The service center of credit investigation shall record all the inquiries26 as conducted by commercial banks and shall feed them back to commercial banks in a timely manner.
Article 37 A commercial bank shall carry out examination on the inquiries of the inpidual credit data in a frequent manner so as to ensure that all inquiries comply with the provisions of the present Measures and shall report the results of the examination on inquiries to the People's Bank of China and the service center of credit investigation on a periodic base.
The service center of credit investigation shall verify the inquiries of the inpidual credit data as made by commercial banks on a periodic base.
Chapter VI Penalties Provisions
Article 38 Where a commercial bank fails to establish the relevant management system and operational procedures according to the present Measures, the People's Bank of China shall order it to correct. Where a commercial bank fails to correct within the time limit, it shall be given a warning and fined 30, 000 yuan.
Article 39 A commercial bank that has any of the following circumstances shall be ordered to correct and be fined 10, 000 yuan up to 30, 000 yuan. Where any crime is involved, it shall be transferred to the judicial27 organ according to law:
（1） Violating the present Measures by failing to report the inpidual credit information in an accurate, complete and timely manner;
（2） Violating the provisions of Article 7 of the present Measures;
（3） Overstepping its power to inquire about the inpidual credit data;
（4） Misusing28 the inquiry result for any other purpose other than those as prescribed by the present Measures;
（5） Violating the provisions on demurral treatment; or
（6） Violating the requirements of security management of the present Measures.
Article 40 Where a commercial bank has the circumstances as prescribed by Articles 38 and 39, the People's Bank of China may suggest that the relevant commercial bank gives a disciplinary punishment to the director of board, senior management personnel and any other person as held directly liable. Where any crime is involved, it shall be transferred to the judicial organ.
Article 41 Where a work staff of the service center has any of the following circumstances, he shall be given an administrative punishment. Where any crime is involved, he shall be transferred to the judicial organ for punishment according to law:
（1） Violating the provisions of the present Measures by altering, damaging, pulging or unlawfully using the inpidual credit information; or
（2） Viciously colluding with any natural person, legal person or any other organization to provide false credit report.
Article 42 Where any other work staff of the People's Bank of China has any act in violation29 of the present Measures, which causes any pulgence30 of inpidual credit information, he shall be given an administrative punishment. Where any crime is involved, he shall be transferred to the judicial organ for punishment according to law.
Chapter VII. Supplementary31 Provisions
Article 43 The term commercial banks as mentioned in the present Measures refers to the commercial banks, urban credit cooperatives, rural credit cooperatives and any other financial institutions that specially32 engage in the credit business as approved by the banking33 regulatory institution of the State Council.
Article 44 The power to interpret the present Measures shall remain with the People's Bank of China.
Article 45 The present Measures shall come into force as of October 1, 2005
