GB/T 46068-2025Data security technology — Security certification requirements for cross-border processing activity of personal information (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents.

This document is proposed and coordinated by the National Cybersecurity Standardization Technical Committee (SAC/TC260).

This document was drafted by: China Certification and Certification (Beijing) Technology Service Co., Ltd., China Cybersecurity Review and Certification and Market Supervision Big Data Center Center, Central University of Finance and Economics, China Electronics Standardization Institute, National Computer Network Emergency Response Technical Processing Coordination Center, National Information Technology Security Research Center, Beijing Branch of National Computer Network and Information Security Management Center, China Software Evaluation Center, China Electronics Technology Group Corporation Network Security Technology Co., Ltd., Tsinghua University, University of Science and Technology of China, Cybersecurity Management Center of Beijing Municipal Bureau of Economy and Information Technology, Beijing Kuaishou Technology Co., Ltd., Beijing UnionPay Gold Card Technology Co., Ltd., Huawei Technologies Co., Ltd., Ant Technology Group Co., Ltd., Sangfor Technologies Technology Co., Ltd., Alibaba (Beijing) Software Services Co., Ltd., Beijing Baidu Netcom Technology Co., Ltd., Qi'anxin Technology Group Co., Ltd. Co., Ltd.

The main drafters of this document are: Bunin, Chen Shixiang, Wang Fengjiao, Zhang Jinping, Hu Ying, Wang Hui, Sun Xiaoli, Chen Qi, Shi Dawei, Chen Te, Chen Liang, Yang Ting, Yan Hui, Wang Yalu, Lu Lei, Li Haidong, Jin Tao, Zuo Xiaodong, Huo Ran, Li Yuan, Li Anlun, Luo Hongwei, Cheng Yuqi, Duan Jinghui, Fan Hua, Wang Huili, Zheng Zheng, Zheng Yunwen, Bai Xiaoyuan, Ye Runguo, Li Zihan, Liu Bin, Yu Yuanyuan, Dong Hualing, Guo Jianling, Liu Qianwei, and Wu Mengting. Data security technology Security certification requirements for cross-border processing of personal information

1 Scope

This document stipulates the basic principles and requirements that relevant parties must comply with when processing personal information across borders, as well as the protection of the rights and interests of personal information subjects. Require.

This document is applicable to parties involved in cross-border processing of personal information to regulate their cross-border processing of personal information, and is also applicable to competent authorities, Third-party organizations and other organizations supervise, manage, certify and evaluate the cross-border processing of personal information by personal information processors.

2 Normative references

GB/T 35273-2020

3 Terms and Definitions

The following terms and definitions apply to this document.