NISSTC Seeks Comments on Basic Security Requirements for Pre-installed Applications on Smartphones
On October 10, 2022, the National Information Security Standardization Technical Committee ("NISSTC") released the Information Security Technology — Basic Security Requirements for Pre-installed Applications on Smartphones (Draft for Comment) (the "Draft for Comment") for public comments by December 8, 2022.
The Draft for Comment focuses on solving issues, such as, there are a large number of pre-installed applications on smartphones that cannot be uninstalled or it is difficult to uninstall them; request of excessive permissions, default permissions, and covert collection of personal information; smartphone manufacturers lack the capability to manage data security of third-party pre-installed applications and personal information protection. The Draft for Comment sets out the basic security requirements for pre-installed applications on smartphones, including security technical requirements and security management requirements. The former includes uninstallability requirements, security functions and assurance requirements, personal information security requirements, etc., among them, the uninstallability requirements include uninstallation scope, requirements for pre-installed applications that cannot be uninstalled, and uninstallation security requirements.
(Source: National Information Security Standardization Technical Committee)