T/TAF 077.17-2021 Active Group standards

T/TAF 077.17-2021 App Collection and Use of Personal Information Minimum Necessary Assessment Standards - Identity Information

T/TAF 077.17-2021

Publish Date: 2021-01-15 Implement Date: 2021-01-15 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/TAF 077.17-2021

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Communication equipment

ICS Name: Comprehensive Telecommunications Terminal Equipment

Publish Date: 2021-01-15

Implement Date: 2021-01-15

Scope

Scope: This document specifies the minimum necessary norms and evaluation methods for the collection, use, storage, and destruction of identity information in mobile application software, and illustrates how to implement the principle of minimum necessity through typical application scenarios in personal information processing activities. This standard applies to mobile Internet application providers who regulate the processing of users' personal information, including identity information, and to organizations such as competent regulatory authorities and third-party evaluation agencies that supervise, manage, and evaluate the collection of identity information by mobile Internet applications. Main technical content: With the rapid development and increasing maturity of mobile Internet, and the maturity and convenience of mobile intelligent terminals, identity information has become an important component for mobile application software to carry out business functions. However, in the process of APP collecting and using identity information, some personal information may not be necessary for users to use this function. This document, in accordance with relevant laws such as the "Cybersecurity Law of the People's Republic of China", and based on the principle of minimum necessity in GB/T 35273-2020 "Information Security Technology - Personal Information Security Specification", proposes minimum necessary information norms and evaluation criteria for mobile application software in processing activities involving the collection, storage, use, processing, transmission, provision, and disclosure of personal information, with the aim of regulating the collection and use of users' identity information in the mobile Internet industry, implementing the principle of minimum necessity, and further promoting the healthy and stable development of the mobile Internet industry.