T/TAF 077.16-2021 APP Collection and Use of Personal Information: Minimum Necessary Assessment Standards for Transaction Records

Scope

Scope: This document aims to implement the principle of minimum necessity in the collection and use of personal information, and proposes corresponding minimum necessity compliance assessment items for all aspects of mobile APP access, collection, storage, processing, and destruction of users' personal information. Combined with typical scenarios, it also stipulates the minimum necessary processing of transaction records by APPs. This document is applicable to guiding mobile Internet application developers in standardizing the processing of users' transaction records, and is also applicable to supervisory departments, third-party evaluation agencies, and other organizations in supervising, managing, and evaluating the collection of personal information by mobile Internet applications. The scope of application of this document only applies to personal information contained in transaction records (orders) in the e-commerce scenario, and does not include personal information contained in cash flow transaction records. Main technical content: Based on the relevant legal requirements of the "Cybersecurity Law of the People's Republic of China" and other laws, and in accordance with the principle of minimum necessity in GB/T 35273-2020 "Information Security Technology - Personal Information Security Specification", this document proposes minimum necessary information norms and evaluation criteria for mobile application software in handling activities involving the collection, storage, use, processing, transmission, provision, and disclosure of personal information, aiming to regulate the collection and use of users' personal information in the mobile Internet industry, implement the principle of minimum necessity, and further promote the healthy and stable development of the mobile Internet industry.

Development Information

Same series standard

Related Standards