T/TAF 077.12-2021 App Collection and Use of Personal Information Minimum Necessary Assessment Standards - Friend List
T/TAF 077.12-2021
Basic Information
Scope
Scope: This document specifies the minimum necessary evaluation requirements that mobile Internet applications (APPS) should follow and refer to in the collection, use, storage, sharing, transfer, and deletion of user friend lists, and explains how to implement the principle of minimum necessity in combination with typical processing scenarios. This document applies to the processing of user friend lists by APPS, and also applies to the evaluation work conducted by competent regulatory authorities and third-party evaluation institutions on the processing of user friend lists by APPS. Main technical content: Friend lists are widely used personal information in the implementation of business by APPS. In GB/T 35273-2020 "Personal Information Security Specification", friend list information is listed as sensitive personal information, indicating that user friend lists have a high degree of sensitivity. However, in some scenarios, there are cases of excessive collection and use of friend lists, which infringe on users' rights and interests. Therefore, this document aims to regulate the collection and use requirements of friend lists, and put forward corresponding requirements and guidance for APPS when collecting and using friend lists.