T/TAF 077.14-2021 Active Group standards

T/TAF 077.14-2021 App Collection and Use of Personal Information: Minimum Necessary Assessment Standards. Application Log Information

T/TAF 077.14-2021

Publish Date: 2021-01-15 Implement Date: 2021-01-15 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/TAF 077.14-2021

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Communication equipment

ICS Name: Comprehensive Telecommunications Terminal Equipment

Publish Date: 2021-01-15

Implement Date: 2021-01-15

Scope

Scope: This document specifies the minimum necessary information standards and evaluation methods for mobile application software in handling activities such as collecting, storing, using, and deleting application log information related to users' personal information. It also illustrates how to implement the principle of minimum necessity through typical application scenarios in personal information processing activities. This document applies to mobile Internet application software providers who regulate the processing of users' personal information (application log information), and it also applies to supervisory departments and third-party evaluation agencies that supervise, manage, and evaluate the collection of application log information by mobile Internet applications. Main technical content: With the rapid development of the mobile Internet, APPs have emerged in various industries and have become closely related to our daily lives. However, in the process of using APPs, due to the lack of necessary norms as a basis, some APPs may collect a large amount of application log information for their own business or other services, which may contain users' privacy information and thus pose a risk of user data leakage. Based on the requirements of relevant laws such as the "Cybersecurity Law of the People's Republic of China" and the "Information Security Technology - Personal Information Security Specification" (GB/T 35273-2020), this document proposes minimum necessary information standards and evaluation criteria for mobile application software in handling activities such as collecting, storing, using, and deleting application log information related to users' personal information. The aim is to regulate the collection and use of application log information in the mobile Internet industry, implement the principle of minimum necessity, and further promote the healthy and stable development of the mobile Internet industry.