T/TAF 268.5-2025 Technical Requirements for the Protection of Personal Information in Generative Artificial Intelligence - Part 5: Secondary Development Management

Scope

Main technical content: This document mainly focuses on the management requirements related to the protection of personal information in the secondary development of generative artificial intelligence service models, including the basic requirements during the secondary development of models and the management requirements for the provision of secondary development services for models, involving technical requirements such as secondary pre-training of models, model optimization, function invocation, access mechanisms, and security assurance. This document is applicable to guiding the design and development of personal information security capabilities for generative artificial intelligence secondary development service providers, and is also applicable to the supervision, evaluation, and certification of the management of generative artificial intelligence secondary development by regulatory authorities and third-party evaluation institutions.

Development Information

Same series standard

Related Standards