GB/T 41574-2022 Information technology—Security techniques—Code of practice for protection of personal information in public clouds
GB/T 41574-2022 Information technology—Security techniques—Code of practice for protection of personal information in public clouds
Basic Information
Scope
This document sets out the control objectives and control measures for implementing personal information protection in the public cloud, and provides guidelines for personal information protection in the public cloud based on GB/T 22081.
This document is applicable to all types and sizes of organizations that process personal information, including public and private companies, government agencies, and non-profit organizations.
This document may also be applicable to organizations that control personal information. However, organizations that control personal information may also be subject to additional laws and regulations on personal information protection and obligations that do not apply to organizations that process personal information. This document does not cover such additional obligations.