Abstract: By analyzing the current circumstances of and issues associated with personal information collection by Apps, this paper clarifies the definition and connotation of the concept of "personal information", explains the principles of collection and puts forward some suggestions on system design and better governance. In fully considering the balance between innovation and regulation, as well as coordinating self-discipline and co-governance, it is proposed that an independent personal information regulatory agency be set up, and a more systematic legal framework built for personal information protection. This can help improve the stability of law enforcement and predictability of legal protection.