GB/T 42574-2023Information security technology—Implementation guidelines for notices and consent in personal information processing (English PDF)

National Standard of the People's Republic of China

ICS

35.030

Classification

L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

• Preface
• 1 Scope
• 2 Normative references
• 3 Terms and Definitions
• 4 Abbreviations
• 5 Applicable Circumstances of Notification
• 5.1 Collection of personal information
• 5.2 Provision and disclosure of personal information
• 5.3 Changes in processing activities, etc
• 5.4 Other situations
• 6 Applicable Circumstances of Consent
• 6.1 Circumstances requiring consent
• 6.2 Circumstances exempt from obtaining consent
• 7 Basic Principles of Information and Consent
• 7.1 Basic principles of notification
• 7.2 Basic principles of consent
• 7.3 Elements that should be considered for notification and consent
• 8 inform
• 8.1 Ways of Notification
• 8.2 Contents of Notification
• 8.3 Implementation of the notification
• 9 agreed
• 9.1 Choice of Consent Mechanism
• 9.2 Implementation of Consent
• 9.3 Implementation of individual consent
• 9.4 Implementation of written consent
• 9.5 Implementation of refusal of consent
• 9.6 Withdrawal of consent
• 9.7 Retention of Evidence of Consent
• Appendix A (informative) Notification and consent of basic business functions and extended business functions of App
• Appendix B (Informative) Notification and Consent in the Scenario of App Embedding a Third-Party SDK
• Appendix C (Informative) Notification and Consent of Handling Personal Information of Minors Under 14 Years of Age
• Appendix D (Informative) Notification and Consent in Smart Life Scenarios
• APPENDIX E (INFORMATIVE) INFORMATION AND CONSENT IN PUBLIC PLACES
• Appendix F (Informative) Notification and Consent in Personalized Push Scenario
• Appendix G (Informative) Notification and Consent in the Cloud Computing Service Scenario
• Appendix H (Informative) Notification and Consent in the Vehicle Scenario
• Appendix I (Informative) Notification and Consent in the Internet Finance Scenario
• Appendix J (Informative) Notice and Consent in Online Shopping Scenario
• Appendix K (Informative) Notification and Consent in the Express Logistics Scenario
• Appendix L (Informative) Notification and Consent in the Internet Real Estate Brokerage Service Scenario
• Appendix M (informative) Notification and consent in the context of personal identification
• Appendix N (informative) Examples of circumstances in which consent may be presumed
• Reference