T/CSAC 006-2023 Mobile Internet applications (Apps) accessing software development kits (SDKs) and personal information security guidelines
T/CSAC 006-2023 Mobile Internet applications (Apps) accessing software development kits (SDKs) and personal information security guidelines
Basic Information
Scope
Scope: This document stipulates the information security guidelines that app providers and SDK providers need to follow throughout the entire life cycle of app access to SDKs, primarily covering and involving four stages: design, development, operation, and exit. This document is applicable to app providers and SDK providers in designing and evaluating their own mechanisms for information security protection and personal information protection, and is also applicable to third-party evaluation agencies and relevant departments for review and evaluation. Main technical content: This standard stipulates the personal information compliance rules that app providers and SDK providers need to follow throughout the four stages of design, development, operation, and exit of app access to SDKs. Firstly, it emphasizes the necessity of SDK access, following the principle of "not accessing unless necessary". Secondly, on the basis of necessity, it conducts compliance audits and evaluations of the access process. This standard is applicable to compliance guidelines for the entire life cycle of SDK access, and is also applicable to the review and evaluation of SDK access.