T/TAF 268.8-2025 Technical Requirements for Personal Information Protection in Generative Artificial Intelligence - Part 8: Supply Chain Management

Scope

Main technical content: This document stipulates the management measures that generative artificial intelligence service providers should meet to protect personal information security during the design, training, and application phases of generative artificial intelligence systems. This document is applicable to guiding generative artificial intelligence service providers in managing personal information security protection during the supply chain management process, and it is also applicable to regulatory authorities and third-party evaluation institutions in supervising and evaluating the security control of generative artificial intelligence personal information protection in the supply chain management process.

Development Information

Same series standard

Related Standards