Xiaomi Reaffirms Commitment to Data Security and Privacy

Xiaomi, the world's leading consumer electronics and smart manufacturing company, recommitted itself to protecting customer data during its annual Security and Privacy Awareness Month completed today. It held employee training events and expert seminars at the Xiaomi Technology Park in Beijing, China and at Xiaomi's Technology Operation Center in Singapore.

This was the third consecutive year that it held special classes for its engineers and other employees and led discussions with industry executives, IT security experts, and the public about the importance of data security and user privacy protection. Xiaomi also released updated white papers on security and privacy along with its annual transparency report detailing its data security activities.
 
The purpose of the month-long series of events was to bolster its user security and privacy protection practices and to build trust in Xiaomi’s products through transparency and accountability.

Xiaomi has built a comprehensive governance structure to protect data security and user privacy. This involves cooperation between cybersecurity experts, smartphone operating system engineers, lawyers, and legal compliance experts. Overseeing these specialists is a Security and Privacy Committee led by senior executives.
 
Cui Baoqiu, Xiaomi Vice President and Chairman of the Xiaomi Security and Privacy Committee, called data security and user privacy protection a key to the long-term, sustainable development of the company's global business. "Protecting the data security and privacy of our users is the top priority,” he said. “Our customers care about this issue more than any other. Xiaomi is committed to offering safe and reliable Android smartphones and IoT products."
 
Eugene Liderman, Director of Android Security Strategy of Google, highlighted Xiaomi's contribution to the Android system. "One of Android's biggest strengths is the diverse ecosystem of partners. Xiaomi is a great example of this and it's great to see their continued investment in cyber security hygiene across their product portfolio", he added.
 
Professor Liu Yang, School of Computer Science and Engineering, Nanyang Technological University, said, "As the security challenge is becoming the focus of many technology discussions, industry stakeholders attach more importance to the urgency of managing vulnerabilities at hardware, software and even in the massive open source space. Xiaomi has made tremendous effort to address the issue, safeguarding users with technology expertise, and continuously exploring new methods for better data protection."
 
With the world's largest consumer IoT platform, Xiaomi is constantly working to improve IoT security and privacy protections. Xiaomi held its fifth annual IoT security summit on June 29 and 30 in Beijing. Industry executives and experts discussed a wide range of issues from data security governance frameworks and cross-border data transfers to the security of internet-connected electric vehicles and solutions for software supply chain security threats.
 
During the June event, Xiaomi announced that its Electric Scooter 4 Pro obtained IoT Security Rating Gold level certification from Underwriter Laboratories Inc, an international safety research institute based in the U.S. This designation made Electric Scooter 4 Pro the world's first electric scooter with such a high-level safety rating. The certificate also indicated that the security baseline of Xiaomi's IoT product development is in line with international standards.
 
Xiaomi created its Security and Privacy Committee in 2014. In 2016, Xiaomi became the first Chinese company to receive certification from TrustArc. Xiaomi adopted the General Data Protection Regulation (GDPR) of European Union compliance assessment in 2018. In 2019, Xiaomi security and privacy practices were certificated on ISO/IEC 27001, ISO/IEC 27018. Last year, Xiaomi published its first transparency report, making it the first Android smartphone brand to do so. Xiaomi this year obtained the certificate of registration of NIST CSF (National Institute of Standards and Technology, Cybersecurity Framework), further strengthening its data security protection capabilities.