GOST R 53647 6-2012 Business continuity management Specification for a personal information management system for data protection《企业延续性管理 数据保护用个人信息管理系统规范》.pdf

1、 53647.6 2012 2014 53647.62012 II 1 - ( ) , 4 2 10 3 29 2012 . 1421- 4 BS 10012:2009 . (BS 10012:2009 Data protection Specification for a personal information management system). 1.5 2004 ( 3.5). 5 1.02012 ( 8). ( 1 ) , . () . , (gost.ru) , 2014 , 53647.62012 III 0.1 (), . 152 27.07.2006 1. 95/46/ 2

2、4 1995 2 , , ( ), , , , , , , , , , , , , . . , , . . ( ), . , , , . , 1, . 0.2 , , , : 1- ; 2- ; 3- , ; 4- ; 5- ; 6- , ; 7- ; 8- , , . . : ; ; , () ; , , . 1, . 0.3 1 , . 53647.62012 1 Business ontinuity management. Specification for a personal information management system for data protection 2013

3、12011 (), , . PDCA (-) (. ). , , , . , , . 2 , 2.1 . 2.1.1 (audit): , () . 9000 2008 , , . 2.1.2 (individual): , .2.1.3 (management system): . 9000 2008 2.1.4 (nonconformity): . 9000 2008, 14001-2007 2.1.5 (organization): , . , , , , , , , , . 2.1.6 (personal information): , , . 53647.62012 2 2.1.7

4、(personal information managementpolicy): , .2.1.8 , (personal informationmanagement system, PIMS): , , , , , .2.1.9 (procedure): , .2.1.10 (process): , . 2.1.11 (processing): , , . , , , , , , , , , , .2.1.12 (sensitive personal information): :a) ;b) ;c) ;d) ;e) ;f) ;g) , , , , , . 2.1.13 (system):

5、. 9000 2008 2.1.14 (workers): , . , , , , .2.2 DCA1), , , .PIMS2) ().3 : , , .3.1 , , , . 3.2 : a) ;b) ;c) ;d) , , / ;e) .1)PDCA Plan-Do-Check-Act. 2)PIMS Personal Information management system. 53647.62012 3 3.3 , . , / . : a) ;b) . . 3.4 , :a) , ;b) ;c) , ;d) ;e) (. . 4.7);f) , (. 4.2); g) , , ;h) , ;i) , ;j) ;k) , ;l) , ;m) ;n) , ;o) (. . 3.5). 3.5 , , (. . 4.1.1). : a) ;b) ; c) ,