Valid

GB/T 42016-2022Information security technology—Data security requirements for online audio and video services (English PDF)

信息安全技术网络音视频服务数据安全要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 42016-2022 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

October 14, 2022

Implementation date

May 1, 2023

Scope

GB/T 42016-2022 is the English-translated version of 信息安全技术网络音视频服务数据安全要求.

GB/T 42016-2022 sets the data security requirements for online audio and video services in China, following the data through collection, storage, use, processing, transmission, provision, disclosure and deletion.

Besides the business composition and data scope, it covers the collection of personal information, the system permissions an app may ask for, informed consent, data display, user profiling and personalised content display, the personal information protection functions of the platform, data provision and disclosure, transfer out of the country, the rights of the personal information subject and the protection of minors, with two scenario clauses on intelligently synthesised audio and video and on protecting the content data itself.

Audio and video editing tools, local players and live services of a messaging kind, such as online meetings, are outside it. Issued on 14 October 2022, it has applied since 1 May 2023.

Found what you need?

Document preview — GB/T 42016-2022

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Overview
5.1 Network audio and video service business composition
5.2 Data Scope of Network Audio and Video Service
6 Basic requirements
7 Data collection
7.1 Collection of personal information
7.2 Applying for system permissions
7.3 Informed consent
8 Data storage and transfer
9 Data use and processing
9.1 Data Display
9.2 User portrait and content personalized display
9.3 Personal information protection function
10 Data provision and disclosure
11 Data Exit
12 Rights of Personal Information Subjects
13 Protection of minors
14 Data Security Requirements for Audio and Video Services Related Scenarios
14.1 Intelligent synthesis of audio and video scene
14.2 Network audio and video content data security protection scenarios
Appendix A (Informative) Data Processing Activities and Security Risks of Network Audio and Video Services
Appendix B (Informative) Reference Rules for Identifying Important Data of Network Audio and Video Services and Examples of Data Classification
Appendix C (Informative) Personal Information Collection Scope and Usage Requirements for Common Extended Business Functions of Online Audio and Video Services
Appendix D (Informative) Application Scope and Usage Requirements for App-related System Permissions for Online Audio and Video Service
Reference

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.

1 Scope

This document specifies the security of data processing activities such as collection, storage, use, processing, transmission, provision, disclosure and deletion of online audio and video services. All requirements.

This document applies to online audio and video service providers to regulate data processing activities, and can also be used for regulatory authorities and third-party evaluation agencies to regulate network Provide reference for the supervision, management and evaluation of audio and video service data processing activities.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.

GB/T 25069 Information Security Technical Terminology

GB/T 35273-2020 Information Security Technology Personal Information Security Specification

GB/T 37988 Information Security Technology Data Security Capability Maturity Model

GB/T 39335 Information Security Technology Personal Information Security Impact Assessment Guide

GB/T 41391-2022 Basic requirements for the collection of personal information by mobile Internet applications (Apps) of information security technology

GB/T 41479 Information Security Technology Network Data Processing Security Requirements

3 Terms and Definitions

The terms and definitions defined in GB/T 25069, GB/T 35273-2020 and the following apply to this document.

3.4 Organizations or individuals using online audio and video services (3.1)

3.2 Information systems providing network audio and video services (3.1)

3.1 Provide

the public with the production, release and dissemination of audio and video information through Internet sites, applications and other network platforms.

Note 1. Also known as network audio and video information services.

Note 2. Does not include audio and video editing tools, local players and online live broadcast (such as online conference) services with instant messaging properties.

3.3 Online audio and video service provider

Organizations or individuals that provide online audio and video services (3.1) to the public.

Note 1. This document mainly refers to the owner and manager of the network audio and video service platform.

Note 2. This document is referred to as "provider".

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Normative references

Similar standards

GB/T 20272-2026|GB/T 20274.2-2026|GB/T 22186-2026|GB/T 24294.1-2026|GB/T 28455-2026|GB/T 31499-2026

How to Download GB/T 42016-2022

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.