China: TC260 releases two draft cybersecurity standards for public comment
The National Information Security Standardization Technical Committee of China ('TC260') announced, on 19 April 2021, that it had released two draft cybersecurity standards for public comment, namely:
- Information security technology — Personal information security measurement and evaluation specification in mobile internet applications ('the Specification'); and
- Information security technology — Guidelines for SDK security in mobile internet applications ('the Guidelines').
In particular, the Specification outlines evaluation methods for the collection, storage, and use of personal information, as well as entrusted processing, sharing, transfer, and public disclosure of personal information. Similarly, the Guidelines highlight personal information protection requirements for the collection, use, storage as well as the sharing, transfer, and public disclosure of personal information.
Public comments can be submitted via email [email protected] until 18 June 2021.