ICS

35.030

CCS

L80

中華人民共和國(guó)國(guó)家標(biāo)準(zhǔn)

GB/T45404—2025

數(shù)據(jù)安全技術(shù)大型互聯(lián)網(wǎng)企業(yè)內(nèi)設(shè)

個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)要求

Datasecuritytechnology—RequirementsforlargeInternetcompaniesinternal

personalinformationprotectionsupervisionagency

2025-03-28發(fā)布2025-10-01實(shí)施

國(guó)家市場(chǎng)監(jiān)督管理總局發(fā)布

國(guó)家標(biāo)準(zhǔn)化管理委員會(huì)

GB/T45404—2025

目次

前言

·····································································································

Ⅲ

1

范圍

··································································································

1

2

規(guī)范性引用文件

······················································································

1

3

術(shù)語(yǔ)和定義

···························································································

1

4

個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)的組成

·······································································

1

4.1

人員構(gòu)成

·························································································

1

4.2

主任、副主任及職責(zé)

·············································································

2

4.3

秘書(shū)及職責(zé)

······················································································

2

5

個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)成員

··········································································

2

5.1

外部成員的任職要求

·············································································

2

5.2

外部成員的提名與任免

··········································································

3

5.3

外部成員的履職

·················································································

4

5.4

內(nèi)部成員的人選與任期

··········································································

4

5.5

內(nèi)部成員的履職

·················································································

5

6

個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)職責(zé)

··········································································

5

6.1

一般事項(xiàng)監(jiān)督

····················································································

5

6.2

特別事項(xiàng)監(jiān)督

····················································································

6

6.3

建議和意見(jiàn)

······················································································

7

7

個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)工作機(jī)制

·····································································

7

7.1

一般要求

·························································································

7

7.2

臨時(shí)會(huì)議

·························································································

8

7.3

延期開(kāi)會(huì)與審議

·················································································

9

7.4

暫緩表決

·························································································

9

7.5

履職獨(dú)立性保障

·················································································

9

7.6

履職條件保障

····················································································

9

7.7

工作規(guī)則制定

····················································································

9

參考文獻(xiàn)

································································································

10

Ⅰ

GB/T45404—2025

前言

本文件按照GB/T1.1—2020《標(biāo)準(zhǔn)化工作導(dǎo)則第1部分：標(biāo)準(zhǔn)化文件的結(jié)構(gòu)和起草規(guī)則》的規(guī)

定起草。

請(qǐng)注意本文件的某些內(nèi)容可能涉及專(zhuān)利。本文件的發(fā)布機(jī)構(gòu)不承擔(dān)識(shí)別專(zhuān)利的責(zé)任。

本文件由全國(guó)網(wǎng)絡(luò)安全標(biāo)準(zhǔn)化技術(shù)委員會(huì)（SAC/TC260）提出并歸口。

本文件起草單位：中國(guó)人民大學(xué)、中國(guó)信息通信研究院、北京理工大學(xué)、中國(guó)電子技術(shù)標(biāo)準(zhǔn)化研究

院、中國(guó)網(wǎng)絡(luò)空間研究院、國(guó)家信息技術(shù)安全研究中心、螞蟻科技集團(tuán)股份有限公司、阿里巴巴

（北京）軟件服務(wù)有限公司、貝殼找房（北京）科技有限公司、北京小桔科技有限公司、北京抖音信息

服務(wù)有限公司、上海得物信息集團(tuán)有限公司、北京京東尚科信息技術(shù)有限公司、北京百度網(wǎng)訊科技有限

公司、華為終端有限公司、北京小米移動(dòng)軟件有限公司、北京微夢(mèng)創(chuàng)科網(wǎng)絡(luò)技術(shù)有限公司、云從科技集

團(tuán)股份有限公司、浙江大學(xué)、上海商湯智能科技有限公司、榮耀終端有限公司、國(guó)家計(jì)算機(jī)網(wǎng)絡(luò)應(yīng)急技

術(shù)處理協(xié)調(diào)中心浙江分中心、深圳市網(wǎng)安計(jì)算機(jī)安全檢測(cè)技術(shù)有限公司、北京奇虎科技有限公司、啟明

星辰信息技術(shù)集團(tuán)股份有限公司。

本文件主要起草人：張新寶、葛鑫、陳琦、洪延青、陳特、陳湉、姚相振、盧磊、姜偉、晏慧、

何延哲、何波、王暉、田申、聶正軍、白曉媛、孫鐵、許銳、王海棠、郭建領(lǐng)、顧偉、劉艾婧、

石玉珍、朱雪峰、劉笑岑、李昳婧、張朝、彭晉、劉克、徐燕、侍敬楠、張娜、陳一夫、黃天寧、

張向拓、谷海燕、王磊、范曄、崔麗莎、覃瀟霄、衣強(qiáng)、趙曉娜、任奎、劉楠、馬俊野、潘潔、李軍、

白雅喜、趙高華、姚一楠、王普、劉金飛、文龍、徐浩、梁蓉蓉、李然、李麗、楊天識(shí)、張瑤。

Ⅲ

GB/T45404—2025

數(shù)據(jù)安全技術(shù)大型互聯(lián)網(wǎng)企業(yè)內(nèi)設(shè)

個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)要求

1范圍

本文件規(guī)定了大型互聯(lián)網(wǎng)企業(yè)建立和運(yùn)行個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)的要求，包括個(gè)人信息保護(hù)監(jiān)督機(jī)

構(gòu)的設(shè)置、職責(zé)、工作規(guī)則，以及個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)的成員等要求。

本文件適用于大型互聯(lián)網(wǎng)企業(yè)建立和運(yùn)行個(gè)人信息保護(hù)監(jiān)督機(jī)構(gòu)及監(jiān)管、檢查、評(píng)估等活動(dòng)。

2規(guī)范性引用文件

下列文件中的內(nèi)容通過(guò)文中的規(guī)范性引用而構(gòu)成本文件必不可少的條款。其中，注日期的引用文

件，僅該日期對(duì)應(yīng)的版本適用于本文件；不注日期的引用文件，其最新版本（包括所有的修改單）適用

于本文件。

GB/T25069—2022信息安全技術(shù)術(shù)語(yǔ)

GB/T35273—2020信息安全技術(shù)個(gè)人信息安全規(guī)范

3術(shù)語(yǔ)和定義

GB/T25069—2022和GB/T35273—2020界定的以及下列術(shù)語(yǔ)和定義適用于本文件。

3.1

大型互聯(lián)網(wǎng)企業(yè)largeInternetcompany

提供重要互聯(lián)網(wǎng)平臺(tái)服務(wù)、用戶(hù)數(shù)量巨大、業(yè)務(wù)類(lèi)型復(fù)