Path:
Home >
GB/T >
Page206 > GB/T 45404-2025
Price & Delivery
US$359.00 · In stock · Download in 9 secondsGB/T 45404-2025: Data security technology - Requirements for large Internet companies internal personal information protection supervision agency
Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See
step-by-step procedureStatus: Valid
| Std ID | Version | USD | Buy | Deliver [PDF] in | Title (Description) |
| GB/T 45404-2025 | English | 359 |
Add to Cart
|
4 days [Need to translate]
|
Data security technology - Requirements for large Internet companies internal personal information protection supervision agency
|
Click to Preview a similar PDF
Basic data
| Standard ID | GB/T 45404-2025 (GB/T45404-2025) |
| Description (Translated English) | Data security technology - Requirements for large Internet companies internal personal information protection supervision agency |
| Sector / Industry | National Standard (Recommended) |
| Classification of Chinese Standard | L80 |
| Classification of International Standard | 35.030 |
| Word Count Estimation | 18,122 |
| Date of Issue | 2025-03-28 |
| Date of Implementation | 10/1/2025 |
| Issuing agency(ies) | State Administration for Market Regulation, China National Standardization Administration |
GB/T 45404-2025: Data security technology - Requirements for large Internet companies internal personal information protection supervision agency
---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Data security technology - Requirements for large Internet companies internal personal information protection supervision agency
Data security technology is installed in large Internet companies
Requirements from the Personal Information Protection Supervisory Agency
Data security technology-Requirements for large Internet companies internal
personal information protection supervision agency
ICS 35.030
CCS L 80
National Standard of the People's Republic of China
Released on 2025-03-28
2025-10-01 Implementation
State Administration for Market Regulation
The National Standardization Administration issued
Table of contents
Preface ... Ⅲ
1 Scope ... 1
2 Normative references ... 1
3 Terms and Definitions ... 1
4 Composition of the Personal Information Protection Supervisory Body ... 1
4.1 Personnel Composition ... 1
4.2 Director, Deputy Director and Responsibilities 2
4.3 Secretary and Responsibilities 2
5 Members of the Personal Information Protection Supervisory Body ... 2
5.1 Requirements for external members 2
5.2 Nomination and appointment of external members 3
5.3 Performance of duties by external members 4
5.4 Selection and term of office of internal members 4
5.5 Performance of duties by internal members 5
6 Responsibilities of the Personal Information Protection Supervisory Agency ... 5
6.1 General Supervision ... 5
6.2 Supervision of special matters 6
6.3 Suggestions and comments 7
7 Working Mechanism of Personal Information Protection Supervisory Institutions ... 7
7.1 General requirements 7
7.2 Extraordinary Meeting 8
7.3 Postponement of meeting and deliberation 9
7.4 Postponement of voting 9
7.5 Guaranteeing independence in performance of duties 9
7.6 Guarantee of conditions for performance of duties 9
7.7 Formulation of work rules 9
References ... 10
Foreword
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1.Structure and drafting rules for standardization documents"
Drafting is required.
Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents.
This document was proposed and coordinated by the National Cybersecurity Standardization Technical Committee (SAC/TC 260).
This document was drafted by. Renmin University of China, China Academy of Information and Communications Technology, Beijing Institute of Technology, China Electronics Technology Standardization Research Institute
Institute of Cyberspace Affairs, China Institute of Cyberspace Affairs, National Information Technology Security Research Center, Ant Group Co., Ltd., Alibaba
(Beijing) Software Service Co., Ltd., Beike Real Estate (Beijing) Technology Co., Ltd., Beijing Xiaoju Technology Co., Ltd., Beijing Douyin Information
Services Co., Ltd., Shanghai Dewu Information Group Co., Ltd., Beijing Jingdong Shangke Information Technology Co., Ltd., Beijing Baidu Netcom Technology Co., Ltd.
Company, Huawei Terminal Co., Ltd., Beijing Xiaomi Mobile Software Co., Ltd., Beijing Weimeng Chuangke Network Technology Co., Ltd., Yuncong Technology Group
Group Co., Ltd., Zhejiang University, Shanghai SenseTime Intelligent Technology Co., Ltd., Honor Terminal Co., Ltd., National Computer Network Emergency Response Technology Co., Ltd.
Zhejiang Branch of the Technical Processing Coordination Center, Shenzhen Wangan Computer Security Testing Technology Co., Ltd., Beijing Qihoo Technology Co., Ltd., Qiming
Xingchen Information Technology Group Co., Ltd.
The main drafters of this document are. Zhang Xinbao, Ge Xin, Chen Qi, Hong Yanqing, Chen Te, Chen Tian, Yao Xiangzhen, Lu Lei, Jiang Wei, Yan Hui,
He Yanzhe, He Bo, Wang Hui, Tian Shen, Nie Zhengjun, Bai Xiaoyuan, Sun Tie, Xu Rui, Wang Haitang, Guo Jianling, Gu Wei, Liu Aijing,
Shi Yuzhen, Zhu Xuefeng, Liu Xiaocen, Li Weijing, Zhang Chao, Peng Jin, Liu Ke, Xu Yan, Shi Jingnan, Zhang Na, Chen Yifu, Huang Tianning,
Zhang Xiangtuo, Gu Haiyan, Wang Lei, Fan Ye, Cui Lisha, Qin Xiaoxiao, Yi Qiang, Zhao Xiaona, Ren Kui, Liu Nan, Ma Junye, Pan Jie, Li Jun,
Bai Yaxi, Zhao Gaohua, Yao Yinan, Wang Pu, Liu Jinfei, Wenlong, Xu Hao, Liang Rongrong, Li Ran, Li Li, Yang Tianshi, Zhang Yao.
Data security technology is installed in large Internet companies
Requirements from the Personal Information Protection Supervisory Agency
1 Scope
This document specifies the requirements for large Internet companies to establish and operate personal information protection supervisory agencies, including
The requirements include the establishment, responsibilities, working rules, and members of the personal information protection supervisory body.
This document applies to large Internet companies that establish and operate personal information protection supervisory bodies and conduct supervision, inspection, and assessment activities.
2 Normative references
The contents of the following documents constitute the essential clauses of this document through normative references in this document.
For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies.
in this document.
GB/T 25069-2022 Information Security Technical Terminology
GB/T 35273-2020 Information security technology Personal information security specification
3 Terms and definitions
The terms and definitions defined in GB/T 25069-2022 and GB/T 35273-2020 and the following apply to this document.
3.1
Large Internet company
Internet companies that provide important Internet platform services, have a huge number of users, and have complex business types.
3.2
Personal information protection supervision agency
The Internet companies established by large enterprises are mainly composed of external members, and they are responsible for their own legal and compliance with personal information protection and fulfillment of personal information protection obligations.
An institution that independently supervises the protection of personal information and its social responsibilities, and provides suggestions and opinions on improving the level of personal information protection.
3.3
external member of personal information protection supervision
agency
Possess professional knowledge and skills in personal information protection, and have no ties with large Internet companies or their major shareholders that may hinder their independent
Independent and objective judgment relationship, supervise the personal information protection of large Internet companies, and issue independent and objective suggestions and opinions.
External experts who hold any other position in a small Internet company.
4 Composition of the Personal Information Protection Supervisory Body
4.1 Personnel Composition
The personal information protection supervision body of a large Internet company should be composed of seven to fifteen internal and external members, of which external members should account for
The ratio shall not be less than two-thirds, and internal members shall not exceed one-third.
...
