基于个人信息保护标准的个人信息安全治理实践

Personal Information Security Governance Practice Based on Personal Information Protection Standards

围绕移动互联网用户个人信息保护,依据以GB/T 35273—2020《信息安全技术个人信息安全规范》为核心的个人信息保护系列标准,研制个人信息安全测评要点与安全检测工具,有力支撑国家App个人信息安全监管、App安全认证、个人信息安全检测评估等工作,规范引导企业个人信息保护管理体系建设与个人信息保护专业人员培训,显著降低了App违法违规收集使用个人信息问题,助力各行业个人信息安全治理和合规能力提升。

Focusing on the protection of personal information of mobile Internet users,according to a series of national standards for personal information protection with GB/T 35273-2020"Information security technology-Personal information(PI)security specification"as the core,formulate personal information security assessment points,develop personal information security testing tools,support national supervision of App personal information security,carry out App security certification,personal information security testing and evaluation,enterprise personal information protection management system construction,personal information protection professional training,significantly reducing the illegal collection and use of personal information by apps,helping enterprises to improve personal information security governance and compliance capabilities.