GB/T 40979-2021Personal information protection requirements and test methods for intelligent household appliances (English PDF)
智能家用电器个人信息保护要求和测评方法
This is a limited preview
Buy now to download the full PDF (26 pages)
Need quotation for your management?
Get a formal quotation for GB/T 40979-2021 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
November 26, 2021
Implementation date
June 1, 2022
Scope
GB/T 40979-2021 is the English-translated version of 智能家用电器个人信息保护要求和测评方法.
GB/T 40979-2021 sets out how intelligent household appliances, their companion apps and the cloud platforms behind them must protect the personal information of users.
It explains how such appliances collect personal information and where it flows, classifies that information and its security level, and lays down technical requirements for each stage of processing: collection, storage, use, public disclosure, sharing and transfer, entrusted processing and cross-border transmission, as well as the rights of the person concerned.
It adds organisational requirements, such as responsible departments, security impact assessments and incident handling, and gives the evaluation methods. Annexes cover typical application scenarios, the minimum information needed for core functions and common vulnerability types. It was issued on 26 November 2021 and has applied since 1 June 2022.
Found what you need?
Document preview — GB/T 40979-2021
National Standard of the People's Republic of China
- ICS
- 97.030
- Classification
- Y 60
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and definitions
- 4 Overview
- 4.1 How smart home appliances collect personal information
- 4.2 Personal Information Circulation Scenario of Smart Home Appliances
- 4.3 Classification of Smart Home Appliances Software Operating System
- 5 Technical requirements
- 5.1 Classification and Security Classification of Personal Information of Smart Home Appliances
- 5.2 Business Process
- 5.3 Rights of the subject of personal information
- 6 Organizational management requirements
- 6.1 Identify responsible departments and personnel
- 6.2 Personal Information Security Impact Assessment
- 6.3 Handling of Personal Information Security Incidents
- 7 Evaluation method
- 7.1 Types and methods of assessment
- 7.2 Selection of Evaluation Method
- Appendix A (informative) Application scenarios of smart home appliances
- Appendix B (Normative) The minimum information and constraints corresponding to the core business functions of smart home appliances
- Appendix C (Informative) Common Vulnerability Types
- C.1 Vulnerabilities in Web Applications and Services
- C.2 Vulnerabilities in mobile applications and services
- References
Foreword
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.
1 Scope
This document specifies the technical requirements, organizational management requirements, and evaluation methods for personal information protection in the application of smart home appliances.
This document applies to the personal information of various organizations related to smart home appliances, smart home appliances systems, and smart home applications Processing activities, including business processes such as personal information collection, storage, and use (public disclosure, sharing and transfer, entrusted processing, and cross-border transmission) to And personal information protection organization management and evaluation.
Note: The evaluation scope of smart home appliance systems in this document includes smart home appliances, apps, and all home appliances that apply network technology, and related equipment operations. Control, data collection, data processing and other applications, as well as related cloud platforms (remote service platforms).
2 Normative references
The content of the following documents constitutes an indispensable clause of this document through normative references in the text. Among them, dated quotations Only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.
GB/T 28219-2018 General technical requirements for smart household appliances
GB/T 35273-2020 Information Security Technology Personal Information Security Specification
GB/T 39335-2020 Information Security Technology Guidelines for Personal Information Security Impact Assessment
3 Terms and definitions
The following terms and definitions defined in GB/T 28219-2018 and GB/T 35273-2020 apply to this document.
3.1 Intelligent household appliances
Household and similar electrical appliances that have applied intelligent technology or have intelligent capabilities/functions.
Note: Smart home appliances can be referred to as smart home appliances, smart home appliances, artificial intelligence home appliances, etc. [Source: GB/T 28219-2018, 3.8]
3.2 Intelligent household appliances system
A home appliance system consisting of at least one smart home appliance and other components.
Note: In addition to the components of smart home appliances and related equipment, network communication systems and related service platforms, the system also includes the above-mentioned products, equipment, System and platform manufacturers, users, service providers and other related parties. [Source: GB/T 28219-2018, 3.9, with modification]
3.3 Smart home
Built on the basis of housing, based on people's higher safety, practicality, convenience, comfort, environmental protection and energy saving of home life. Comprehensive demand, home furnishing facilities and its management system composed of one or more smart home appliance systems.
Note: Smart home can also be called smart home, smart home, smart home, etc.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 26 pages — is available in the English PDF.
Referenced standards
Normative references
Cited by
- GB/T 37877-2025Intelligentization technology for intelligent household appliances — Particular requirements for refrigerators
- GB/T 45334-2025Smart elderly-oriented technical specification for air conditioners
- GB/T 46484.1-2025Technical specification of age-friendly technology for household electrical appliances - Part 1: General requirements
- GB/T 46505.1-2025Application scenarios of intelligent household appliances - Part 1: General requirements
- GB/T 41789-2022General safety technology requirements for intelligent household appliances
Similar standards
How to Download GB/T 40979-2021
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 28219-2018 — General Technology Requirements For Intelligent Household Appliances
GB/T 35273-2020 — Information security technology—Personal information security specification
GB/T 39335-2020 — Information security technology—Guidance for personal information security impact assessment
Secure payment via Stripe
Payments accepted
GB/T 40979-2021
$420.00