By Julie Zhu
HONG KONG (Reuters) -Chinese ride-hailing firm Didi Global Inc is in talks with state-owned information security firm Westone to handle its data management and monitoring activities, sources said, as part of its efforts to placate domestic regulators.
The largest Chinese ride-hailing group became the target of an investigation by regulators in the country just days after it raised $4.4 billion in an initial public offering in the United States.
The powerful Cyberspace Administration of China (CAC) last month launched a data-related cybersecurity investigation into Didi, citing a need to protect national security and the public interest.
Didi is in discussions with Westone Information Industry Inc, which would be the main third-party company to manage its massive data stored domestically as per domestic regulators’ guidance, said two people with knowledge of the matter.
The sources declined to be named as they were not authorised to speak to the media.
Didi, Shenzhen-listed Westone, the CAC, and the State Council Information Office did not immediately respond to Reuters’ requests for comment after regular Asia business hours on Friday.
Westone, which provides information security services and products, counts state-owned China Electronics Technology Cyber Security Co. Ltd as parent and the biggest shareholder – making it a preferred candidate for Beijing, said the people.
Didi has submitted proposals to Chinese regulators in recent weeks to allay their concerns, which included bringing in Westone for managing the ride-hailing firm’s data across various business lines, said one of the people.
SECURITY CONCERNS
The discussions come amid Beijing’s widening crackdown on privately-owned companies over antitrust and data security concerns, which has wiped off billions of dollars from the market value of some home-grown companies in recent sessions.
Didi, which has about 377 million annual active users and 13 million annual active drivers in China, provides 25 million rides a day in China to users who sign up through an app that uses a phone number and password.
Bloomberg earlier on Friday reported Didi was considering conceding management of its data to a private third party as part of its efforts to resolve the regulatory probe, without naming the company.
Didi’s discussions with Westone indicate how Beijing is looking to rein in some major privately-owned companies after years of a more laissez-faire approach, and involve state-backed firms with a view to have firmer control over their operations.
Under the plan being discussed, Westone, which is based in southwestern Sichuan province, would be able to access Didi’s servers across the country to track the latter’s data collection, usage and transfer, said the people.
It would also use its advanced encryption algorithm to prevent potential data breaches at Didi, said the second person. Encryption is regularly used to protect and securely transfer information online.
The CAC, which started a review into Didi’s handling of customer data in the middle of its campaign to list in New York, last month called for Didi to stop accepting new user registrations.
The regulator also said Didi’s app “has serious violations of laws and regulations pertaining to the collection of personal information.”
(Reporting by Julie Zhu in Hong KongEditing by Sumeet Chatterjee and David Holmes)
