T/TAF 077.9-2021 APP Collection and Use of Personal Information Minimum Necessary Assessment Standards SMS Information

Scope

Scope: This document is part of a series of standards for the minimum necessary assessment of APP's collection and use of personal information, aiming to implement the principle of minimum necessity in the collection and use of personal information. It proposes corresponding minimum necessary compliance assessment items for all aspects of mobile APP accessing, collecting, storing, using, and deleting users' mobile phone SMS information, and combines typical scenarios to regulate APP's minimum necessary processing of SMS information. This document is applicable to regulating the processing of users' SMS information by mobile Internet application developers, and is also applicable to supervisory authorities and third-party evaluation organizations in supervising, managing, and evaluating the collection of SMS information by mobile Internet applications. Main technical content: Based on relevant legal requirements such as the "Cybersecurity Law of the People's Republic of China", and in accordance with the minimum necessary principle of GB/T 35273-2020 "Information Security Technology - Personal Information Security Specification", this document proposes minimum necessary information norms and evaluation criteria for mobile application software in handling activities involving the collection, storage, use, and deletion of personal SMS information, aiming to regulate the collection and use of users' SMS information in the mobile Internet industry, implement the principle of minimum necessity, and further promote the healthy and stable development of the mobile Internet industry.

Development Information

Same series standard

Related Standards