Standards registry
Standards
Verified official metadata for national standards related to personal information, data security, cybersecurity, artificial intelligence, privacy, and MLPS classified protection.
This registry explains what each standards family is used to research and clearly separates verified metadata from source-tracking records. It does not reproduce full standards text or claim an official English translation.
How to Read the Tracker
Verified means the number, title, dates, status, and official catalogue source have completed review. Standards remain technically distinct from binding laws and regulations.
What Standards Add
GB/T standards can provide technical and governance context for topics such as personal information protection, data classification and grading, impact assessment, and classified protection. They should be read separately from binding laws and regulations.
| Standard No. | Title | Category | Status | Implementation Date | Record Type | Translation | Verification |
|---|---|---|---|---|---|---|---|
| GB/T 22239-2019 | Information security technology — Baseline for classified protection of cybersecurity信息安全技术 网络安全等级保护基本要求 | MLPS / Classified Protection | effective | 2019-12-01 | Source tracker | public metadata only | Verified |
| GB/T 22240-2020 | Information security technology — Classification guide for classified protection of cybersecurity信息安全技术 网络安全等级保护定级指南 | MLPS / Classified Protection | effective | 2020-11-01 | Source tracker | public metadata only | Verified |
| GB/T 25070-2019 | Information security technology — Technical requirements of security design for classified protection of cybersecurity信息安全技术 网络安全等级保护安全设计技术要求 | MLPS / Classified Protection | effective | 2019-12-01 | Source tracker | public metadata only | Verified |
| GB/T 28448-2019 | Information security technology — Evaluation requirements for classified protection of cybersecurity信息安全技术 网络安全等级保护测评要求 | MLPS / Classified Protection | effective | 2019-12-01 | Source tracker | public metadata only | Verified |
| GB/T 30279-2020 | Information security technology — Guide for classification of cybersecurity vulnerabilities信息安全技术 网络安全漏洞分类分级指南 | Cybersecurity / Data Security | effective | 2021-06-01 | Source tracker | public metadata only | Verified |
| GB/T 31500-2024 | Information security technology — Security specification for storage-media data recovery services信息安全技术 存储介质数据恢复服务安全规范 | Cybersecurity / Data Security | effective | 2025-05-01 | Source tracker | public metadata only | Verified |
| GB/T 35273-2020 | Information security technology — Personal information security specification信息安全技术 个人信息安全规范 | Personal Information / Privacy | effective | 2020-10-01 | Source tracker | public metadata only | Verified |
| GB/T 37964-2019 | Information security technology — Guide for de-identifying personal information信息安全技术 个人信息去标识化指南 | Personal Information / Privacy | effective | 2020-03-01 | Source tracker | public metadata only | Verified |
| GB/T 39335-2020 | Information security technology — Guidance for personal information security impact assessment信息安全技术 个人信息安全影响评估指南 | Personal Information / Privacy | effective | 2021-06-01 | Source tracker | public metadata only | Verified |
| GB/T 43697-2024 | Cybersecurity technology — Rules for data classification and grading网络安全技术 数据分类分级规则 | Data Classification / Important Data | effective | 2024-10-01 | Source tracker | public metadata only | Verified |
| GB/T 43739-2024 | Information security technology — Guidance for normative review and management of personal information processing by apps in app stores信息安全技术 应用商店的移动互联网应用程序个人信息处理规范性审核与管理指南 | Mobile App Privacy | effective | 2024-11-01 | Source tracker | public metadata only | Verified |
| GB/T 44588-2024 | Cybersecurity technology — Requirements for privacy policies of internet platforms and product services网络安全技术 互联网平台及产品服务隐私协议要求 | Privacy Notices | effective | 2025-04-01 | Source tracker | public metadata only | Verified |
| GB/T 45404-2025 | Data security technology — Requirements for internal personal-information protection supervisory bodies in large internet enterprises数据安全技术 大型互联网企业内设个人信息保护监督机构要求 | Governance / Accountability | effective | 2025-10-01 | Source tracker | public metadata only | Verified |
| GB/T 45574-2025 | Data security technology — Security requirements for processing sensitive personal information数据安全技术 敏感个人信息处理安全要求 | Sensitive Personal Information | effective | 2025-11-01 | Source tracker | public metadata only | Verified |
| GB/T 46068-2025 | Data security technology — Security certification requirements for cross-border personal-information processing activities数据安全技术 个人信息跨境处理活动安全认证要求 | Cross-border Data Certification | effective | 2026-03-01 | Source tracker | public metadata only | Verified |
| GB/T 46071-2025 | Data security technology — Guidance on social responsibility for data security and personal-information protection数据安全技术 数据安全和个人信息保护社会责任指南 | Governance / Social Responsibility | effective | 2026-03-01 | Source tracker | public metadata only | Verified |
| GB/T 46901-2025 | Data security technology — Requirements for personal-information transfer based on an individual's request数据安全技术 基于个人请求的个人信息转移要求 | Data Portability | effective | 2026-07-01 | Source tracker | public metadata only | Verified |
| GB/T 46903-2025 | Data security technology — Requirements for personal-information protection compliance audits数据安全技术 个人信息保护合规审计要求 | Compliance Audit | effective | 2026-07-01 | Source tracker | public metadata only | Verified |
| GB/T 47469-2026 | Data security technology — Guidance for managing personal-information processing activities by mobile smart-terminal applications数据安全技术 移动智能终端应用程序个人信息处理活动管理指南 | Mobile App Privacy | upcoming | 2026-11-01 | Source tracker | public metadata only | Verified |
| GB 45438-2025 | Cybersecurity technology — Labeling methods for artificial intelligence-generated and synthetic content网络安全技术 人工智能生成合成内容标识方法 | AI Content Labeling | effective | 2025-09-01 | Source tracker | public metadata only | Verified |
| GB/T 45392-2025 | Cybersecurity technology — Security requirements for automated decision-making based on personal information网络安全技术 基于个人信息的自动化决策安全要求 | Automated Decision-Making | effective | 2025-10-01 | Source tracker | public metadata only | Verified |
| GB/T 45389-2025 | Cybersecurity technology — Security framework for artificial intelligence computing platforms网络安全技术 人工智能计算平台安全框架 | AI Platform Security | effective | 2025-10-01 | Source tracker | public metadata only | Verified |
| GB/T 45577-2025 | Data security technology — Methods for data security risk assessment数据安全技术 数据安全风险评估方法 | Data Security Risk Assessment | effective | 2025-11-01 | Source tracker | public metadata only | Verified |
| GB/T 45652-2025 | Cybersecurity technology — Basic security requirements for generative artificial intelligence services网络安全技术 生成式人工智能服务安全基本要求 | Generative AI Security | effective | 2025-11-01 | Source tracker | public metadata only | Verified |
| GB/T 46796-2025 | Data security technology — Methods for monitoring data-interface security risks数据安全技术 数据接口安全风险监测方法 | Data Interface Security | effective | 2026-07-01 | Source tracker | public metadata only | Verified |
| GB/T 20272-2026 | Cybersecurity technology — Technical specification for security of operating systems网络安全技术 操作系统安全技术规范 | Cybersecurity / System Security | upcoming | 2026-11-01 | Source tracker | public metadata and original implementation commentary only | Verified |
| GB/T 20274.2-2026 | Cybersecurity technology — Evaluation framework for information systems security assurance — Part 2: Security assurance requirements网络安全技术 信息系统安全保障评估框架 第2部分:安全保障要求 | Cybersecurity / Security Assurance | upcoming | 2026-12-01 | Source tracker | public metadata and original implementation commentary only | Verified |
These are metadata and editorial-research records. The site does not publish or sell national-standard full text or complete translations; paid materials remain original implementation guides, checklists, mappings, and assessment tools.