GB/T 45703-2025Consumer privacy protection in consumer goods and services design high-level requirements (English PDF)

3.1 Consumer

A member of the public who purchases or uses property or products for private purposes.

Note 1."Consumers" (including the elderly, children, and the disabled) include both consumers and potential consumers. Consumer goods can be purchased on a one-time basis or under a long-term contract.

Note 2. This term applies only to natural persons and not to legal entities.

Note 3 to entry. Property, product or service (3.4) purchased or used by a consumer is not limited to private use but can also be used for professional purposes (e.g. bring your own device). [Source: GB/T 36000-2015, 3.19, with modifications]

3.2 Personal information

Information that can be used to establish a connection between the information and the relevant natural person, or that can be directly or indirectly associated with a natural person information.

Note 1. To determine whether the subject of personal identity information is identifiable, it is necessary to consider whether the privacy stakeholders or any other party holding the data can reasonably All means available to link PII to a natural person.

Note 2 to entry. Public cloud personally identifiable information processors (3.20) generally do not have explicit knowledge of the categories of information they process unless the cloud service customer makes this transparent. [Source: ISO /IEC 19944-1:2020, 3.3.1, with modifications]

3.3 Privacy breach

Processing personally identifiable information (3.2) in violation of one or more relevant privacy protection requirements (3.9). [Source: ISO /IEC 29100:2024, 2.13]

3.4 Service

one or more activities provided to satisfy the interests or needs of consumers (3.1)

Note 1 to entry. Services are generally intangible.