GB/T 42582-2023Information security technology - Personal information security testing and evaluation specification in mobile internet applications (App) (English PDF)
信息安全技术 移动互联网应用程序（App）个人信息安全测评规范
This is a limited preview
Buy now to download the full PDF (79 pages)
Need quotation for your management?
Get a formal quotation for GB/T 42582-2023 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
May 23, 2023
Implementation date
December 1, 2023
Scope
GB/T 42582-2023 is the English-translated version of 信息安全技术 移动互联网应用程序（App）个人信息安全测评规范.
GB/T 42582-2023 is the Chinese standard "Information security technology - Personal information security testing and evaluation specification in mobile internet applications (App)".
Its scope clause reads: This document specifies the evaluation process for personal information security evaluation of mobile Internet applications based on GB/T 35273-2020: and methods for evaluating various safety requirements: This document is applicable to guide third-party evaluation agencies to evaluate personal information security of mobile Internet applications, and to supervise The department supervises and manages the personal information security of mobile Internet applications, and mobile Internet application operators carry out personal information security: Refer to the implementation of the full self-assessment:. Its clauses include terms and definitions.
Found what you need?
Document preview — GB/T 42582-2023
National Standard of the People's Republic of China
- ICS
- 35.030
- Classification
- L80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Evaluation Process and Method
- 6 Evaluation implementation content
- 7 Result judgment
- 8 Reporting
- Appendix A (Informative) Basic Information Collection Form of App Operators
- Appendix B (informative) Description of the evaluation unit number
- Appendix C (Informative) Examples of App Fraud, Deception, and Misleading Ways to Collect Personal Information
- Appendix D (Informative) Frequency of App Collection of Personal Information in Different Scenarios
- Appendix F (informative) Applicable evaluation units only for App evaluation
1 Scope
This document specifies the evaluation process for personal information security evaluation of mobile Internet applications based on GB/T 35273-2020:
and methods for evaluating various safety requirements:
This document is applicable to guide third-party evaluation agencies to evaluate personal information security of mobile Internet applications, and to supervise
The department supervises and manages the personal information security of mobile Internet applications, and mobile Internet application operators carry out personal information security:
Refer to the implementation of the full self-assessment:
2 Normative references
The contents of the following documents constitute the essential provisions of this document through normative references in the text: Among them, dated references
For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document:
GB/T 25069-2022 Information Security Technical Terminology
GB/T 35273-2020 Personal Information Security Specifications for Information Security Technology
GB/T 41391-2022 Information Security Technology Mobile Internet Application (App) Basic Requirements for Collection of Personal Information
3 Terms and Definitions
Defined in GB/T 25069-2022, GB/T 35273-2020 and GB/T 41391-2022 and the following terms and definitions apply in this document:
3:1
Applications running on mobile smart terminals:
Note: Including mobile smart terminal presets, downloaded and installed applications and applets:
3:2
Mobile internet application owner, manager or provider:
3:3
Software libraries to assist in software development:
NOTE: A software development kit typically includes a collection of related binaries, documentation, examples, and tools:
3:4 […]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 79 pages — is available in the English PDF.
Referenced standards
Normative references
Similar standards
GB 38031-2025|GB/T42582-2023|GB/T 1|GB/T 35273-2020|GB/T 25069-2022|GB/T 41391-2022|GB/T 42447|GB/T 42453
How to Download GB/T 42582-2023
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 25069-2022 — Information security techniques—Terminology
GB/T 35273-2020 — Information security technology—Personal information security specification
GB/T 41391-2022 — Information security technology—Basic requirements for collecting personal information in mobile internet applications
Secure payment via Stripe
Payments accepted
GB/T 42582-2023
$1,025.00