Valid

GB/T 42013-2022Information security technology—Data security requirements for express logistics services (English PDF)

信息安全技术快递物流服务数据安全要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (18 pages)

Need quotation for your management?

Get a formal quotation for GB/T 42013-2022 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

October 14, 2022

Implementation date

May 1, 2023

Scope

GB/T 42013-2022 is the English-translated version of 信息安全技术快递物流服务数据安全要求.

GB/T 42013-2022 sets the data security requirements for express logistics services in China, following the data through collection, storage, transmission, use, processing, provision, disclosure, deletion and transfer out of the country.

Besides the business composition and the data scope of such a service, it covers the collection of personal information, the system permissions an app may ask for, informed consent, data display, access and export, personalised recommendation, logging and auditing, and the rights of the personal information subject, and it adds clauses on three typical scenarios: the courier round, smart parcel lockers and mailboxes, and the handheld terminals used for pick-up and delivery.

Road freight transport services are outside it. Written for providers, it can also serve regulators and third-party assessment bodies as a reference. Issued on 14 October 2022, it has applied since 1 May 2023.

Found what you need?

Document preview — GB/T 42013-2022

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Overview
5.1 Composition of Express Logistics Service Business
5.2 Data scope of express logistics service
6 Basic Requirements
7 Data Collection
7.1 Collection of personal information
7.2 Applying for system permissions
7.3 Informed Consent
8 Data storage and transmission
8.1 Data Storage
8.2 Data transmission
9 Data usage and processing
9.1 Data Display
9.2 Data Access
9.3 Data export
9.4 Personalized recommendation
9.5 Logging and Auditing
10 Data provision and disclosure
11 Data deletion
12 Data Export
13 Rights of Personal Information Subject
14 Data Security Protection in Typical Business Scenarios of Express Logistics Service
14.1 Courier service
14.2 Smart Express Box and Smart Mailbox
14.3 Receiving and dispatching mobile operation terminals
Appendix A (Informative) Data Processing Activities and Security Risks of Express Logistics Services
Appendix B (Informative) Reference Rules for Identification of Important Data in Express Logistics Services and Example of Data Classification
Appendix C (Informative) Scope of Personal Information Collection and Use Requirements for Common Extended Business Functions of Express Logistics Services
Appendix D (Informative) Application Scope and Requirements for System Permissions of Express Logistics Service App
Appendix E (informative) information query feedback rules
Reference

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules for Standardization Documents" drafting.

1 Scope

This document specifies the data processing activities of express logistics services such as collection, storage, transmission, use, processing, provision, disclosure, deletion, and export. security requirements.

This document is applicable to express logistics service providers to standardize data processing activities, and can also be used by regulatory authorities and third-party evaluation agencies to Provide a reference for monitoring, managing, and evaluating stream service data processing activities.

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 25069 Information Security Technical Terms

GB/T 35273-2020 Personal Information Security Specifications for Information Security Technology

GB/T 37988 Information Security Technology Data Security Capability Maturity Model

GB/T 39335 Information Security Technology Personal Information Security Impact Assessment Guidelines

GB/T 41391-2022 Information Security Technology Mobile Internet Application (App) Basic Requirements for Collection of Personal Information

GB/T 41479 Information Security Technology Network Data Processing Security Requirements

3 Terms and Definitions

GB/T 25069, GB/T 35273-2020 and the following terms and definitions apply to this document.

3.1 Express logistics service

Express mail delivery service within the promised time frame.

Note 1. Express logistics services mentioned in this document do not include road cargo transportation services.

Note 2. It involves the complete activities from receiving the user's order to delivering the item to the user, usually including services such as placing an order, picking up items, packaging, transferring, and delivering items links. [Source: GB/T 27917.1-2011, 2.1, modified]

3.2 Sender user

Individuals or organizations using express logistics services (3.1).

Note: Including the sending user and the receiving user, referred to as "user" in this document.

3.3 Express logistics service provider

The general term for express logistics service organizations (3.4), express logistics service acceptance organizations (3.6), and express storage organizations (3.7).

Note: This document is referred to as "provider".

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 18 pages — is available in the English PDF.

Referenced standards

Normative references

Cited by

Similar standards

GB/T 20272-2026|GB/T 20274.2-2026|GB/T 22186-2026|GB/T 24294.1-2026|GB/T 28455-2026|GB/T 31499-2026

How to Download GB/T 42013-2022

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.