T/TAF 077.13-2021 App Collection and Use of Personal Information Minimum Necessary Assessment Standards Sensor Information
T/TAF 077.13-2021
Basic Information
Scope
Scope: This document specifies the minimum necessary information standards and evaluation methods for the collection, storage, use, sharing, transfer, and public disclosure of personal information in sensor data, and explains how to implement the principle of minimum necessity through typical application scenarios in personal information processing activities. This document applies to mobile Internet application software providers who regulate the processing of personal information involving sensors, and also applies to supervisory authorities and third-party evaluation agencies that monitor, manage, and evaluate the processing of personal information in sensor data by relevant parties. Before conducting evaluations, it is necessary to confirm that the specified terminals can be physically used by users, and to identify and exclude virtual devices created through virtualization or forgery at the operating system level. Main technical content: With the development of the Internet, relevant technologies are increasingly being applied to various sensors in mobile intelligent terminals, which has facilitated people's lives and recorded a lot of personal information related to daily life and health. Based on the requirements of relevant laws such as the "Cybersecurity Law of the People's Republic of China", and in accordance with the principle of minimum necessity in GB/T 35273-2020 "Information Security Technology - Personal Information Security Specification", this document proposes minimum necessary information standards and evaluation criteria for the collection, storage, use, sharing, transfer, and public disclosure of personal information in sensor data, aiming to regulate personal information in sensor data, implement the principle of minimum necessity, and further promote the healthy and stable development of the mobile Internet industry.