The people, who declined to be identified as the information was private, said they expect Chinese regulators to finalise any penalties on the company in December.
The company has set aside 10 billion yuan ($1.6 billion) for a potential fine, said one of the sources.
In July, the powerful Cyberspace Administration of China (CAC) ordered app stores to remove 25 mobile apps operated by Didi – just days after the ride-hailing giant listed in New York. It also told the company to stop registering new users, citing national security and the public interest.
Asked about its preparations to relaunch the apps and the amount set aside for a potential fine, Didi said the information obtained by Reuters was “pure hearsay with no grounds in fact” and that it was cooperating actively and fully with the cybersecurity review. It did not elaborate further.
The CAC did not immediately respond to a request for comment.
Didi ran afoul of the CAC when it pressed ahead with its New York listing on June 30, even though the regulator had urged the company to put it on hold while a cybersecurity review of its data practices was conducted, separate sources have told Reuters.
Soon after, the CAC launched an investigation into Didi over its collection and use of personal data. It said data had been collected illegally and the apps concerned included those for its delivery service, camera device and finance services.
Didi responded at the time by saying it had stopped registering new users and would make changes to comply with rules on national security and personal data protection, and would protect users’ rights.
Didi has since been making changes to the apps to ensure they comply with China’s Personal Information Protection Law which took effect on Nov. 1, the three people with knowledge of the matter said, adding that all staff had to complete training about the new law.
The changes include an updated and lengthy user agreement for customers to sign that clearly defines what data will be collected and how it will be used, said one of the sources.
The company is also working on new strategies to recruit drivers for the relaunch as many moved to rival services due to uncertainty surrounding the business because of the investigation, this source added.
Didi provides 25 million rides a day in China to users who sign up through an app that uses a phone number and password.
Its shares have halved since its New York debut to leave its valuation at $43 billion. The investigation came amid a slew of regulatory moves by Beijing that have upended norms for a range of sectors from tech to property to private tutoring.
In particular, China has instructed its technology giants to provide more secure storage of user data amid public complaints about mismanagement and misuse that have resulted in privacy violations.
The new Personal Information Protection law states that the handling of information must have a clear and reasonable purpose, lays out conditions under which companies can collect personal data and offers guidelines for ensuring data is protected when it is transferred outside the country.
