Updated on 2026-07-27 GMT+08:00

Managing Third Parties

Huawei may engage third-party suppliers to process personal data (including customer and employee information) for specific business purposes. Personal data retained by suppliers beyond the specified period increases the risk of a data breach. This module is designed to mitigate the risk of overdue data retention and establish a mechanism in Huawei to manage the retention of personal data by suppliers.

Creating a Data Item

  1. Log in to the PCMC.
  2. In the navigation pane, choose Third-party Management. The Third-party Management page is displayed.
  3. Click Create in the upper left corner.
  4. Set parameters by referring to Table 1.

    Table 1 Supplier data parameters

    Module

    Parameter

    Description

    Basic Information

    Procurement Requirement Department

    The department within a company or organization that submits requirements for the procurement of necessary resources, including goods, equipment, and services, to support business operations.

    Project Name

    Project name.

    Contract Start Time

    Click to select the contract start time.

    Contract End Time

    Click to select the contract end time.

    Supplier Number

    A unique identifier of a supplier, which is usually a combination of numbers and letters.

    Supplier Name

    The name of a legal entity or individual that provides products, services, or raw materials to a company or organization.

    Whether personal data delegation is involved

    Select whether personal data delegation is involved.

    Whether personal information flows out

    Select whether outbound flows of personal information are involved.

    Supplier processing purpose

    The justification and objective for engaging a supplier.

    Data Retention Information

    Quantity of personal data entrusted to supplier for processing

    Quantity of personal data entrusted to supplier for processing

    Handler

    Enter the handler.

    Quantity of personal data entrusted to supplier for processing

    In the drop-down list, select the type of personal data entrusted to the supplier for processing, for example, Name or Birthday.

    Whether data is cross-border during entrusted processing

    Select whether cross-border data transfer is involved during the entrusted processing.

    Cross-border Target Country

    If cross-border transfer is involved, select the target country or region.

    Estimated data retention period on the supplier side

    Click to select the estimated data retention period on the supplier side.

    Method for disposing expired data on the supplier side

    Specify the disposal method for expired data held by the supplier, for example, deletion.

    Time for disposing expired data of the supplier

    Click to select the disposal date for expired data held by the supplier.

  5. Click Next Step in the lower right corner and set Associated DI and Type of personal data entrusted to supplier for processing. You can click Associate DI in the upper left corner and select a DI from the dialog box that is displayed. Only approved DIs can be selected.
  6. Click Confirm.

Related Operations

  • Click Edit in the Operation column to edit information about a third party.
  • Click Delete in the Operation column to delete information about a third party.
  • Click View in the Operation column to check information about a third party.