T/TAF 077.9-2022 APP Collection and Use of Personal Information Minimum Essential Evaluation Specification Part 9: Short Message Service Information
T/TAF 077.9-2022 APP Collection and Use of Personal Information Minimum Essential Evaluation Specification Part 9: Short Message Service Information
Basic Information
Scope
Scope: This document is part of a series of standards for the minimum necessary assessment of personal information collection and use by APPs, aiming to implement the principle of minimum necessary collection and use of personal information. It proposes corresponding minimum necessary compliance assessment items for all aspects of mobile APPs accessing, collecting, storing, using, and deleting users' SMS information (including MMS, 5G messages, and other multimedia methods), and specifies the minimum necessary processing of SMS information by APPs based on typical scenarios. This document is applicable to regulating the processing of users' SMS information by mobile Internet application developers, and it is also applicable to supervision, management, and evaluation of SMS information collection activities by competent regulatory authorities and third-party evaluation organizations. Main technical content: Based on relevant legal requirements such as the "Cybersecurity Law of the People's Republic of China", and in accordance with the minimum necessary principle of GB/T 35273 "Information Security Technology - Personal Information Security Specification", this document proposes minimum necessary information norms and evaluation criteria for mobile application software in processing activities involving the collection, storage, use, and deletion of personal SMS information, aiming to regulate the collection and use of users' SMS information in the mobile Internet industry, implement the principle of minimum necessary, and further promote the healthy and stable development of the mobile Internet industry.