T/TAF 077.5-2022 APP Collection and Use of Personal Information Minimum Essential Evaluation Specification Part 5: Device Information
T/TAF 077.5-2022 APP Collection and Use of Personal Information Minimum Essential Evaluation Specification Part 5: Device Information
Basic Information
Scope
Scope: This document specifies the minimum necessary assessment standards for mobile application software in handling activities involving the collection, storage, use, and deletion of users' personal information (device information), and illustrates how to implement the principle of minimum necessity through typical application scenarios of device information in processing activities. This document applies to the regulation of personal information (device information) processing activities in mobile application software, and also applies to the supervision, management, and evaluation of mobile application software's collection and use of device information by third-party assessment agencies and other organizations. Main technical content: With the rapid development and increasing maturity of mobile Internet, and the maturity and convenience of mobile intelligent terminal functions, device information has become an important component of mobile application software in conducting business functions. Collecting and using personal information in accordance with the principle of minimum necessity has become the main goal of mobile application software in personal information processing activities. This document, in accordance with relevant legal requirements such as the "Cybersecurity Law of the People's Republic of China", and based on the principle of minimum necessity in GB/T 35273 "Information Security Technology - Personal Information Security Specification", proposes minimum necessary information standards and evaluation criteria for mobile application software in handling activities involving the collection, storage, use, and deletion of personal information and device information, aiming to regulate the collection and use of user device information in the mobile Internet industry, implement the principle of minimum necessity, and further promote the healthy and stable development of the mobile Internet industry.