Personal Data

At the time information belonging to state secrets is declassified, citizens are allowed to access it according to regulations. Photo: Hai Nguyen.

New proposal on citizens not being able to access information

|

At the time information belonging to state secrets is declassified, citizens are entitled to access according to regulations.

On behalf of the Secretariat, Politburo Member, Standing Secretary of the Secretariat Tran Cam Tu signed and issued Directive No. 57, requesting the application of mandatory identity verification measures for social network users. Photo: Vietnam Communist Party Information Portal.

Verifying social network identity to clean up cyberspace

|

The Secretariat's issuance of Directive 57, emphasizing the mandatory identification requirement for social network users, has received the support of the people.

Protect personal data with NDAKey autonomous identity management solution operated on the national blockchain platform. Photo: Ngoc Anh

Protect personal data with autonomous identity management solution

|

In the current digital environment, the problem of protecting user data is becoming more urgent than ever.

Personal data in the big data environment, artificial intelligence, blockchain, virtual universe and cloud computing must be processed for the right purpose and within the necessary scope, ensuring the legitimate rights and interests of the personal data subject. Photo: VGP

Protecting personal data in artificial intelligence processing

|

Reader with email thucucxxx@gmail.com sends a question: How to protect personal data in artificial intelligence processing?

Personal data protection forces include: Specialized agencies for personal data protection under the Ministry of Public Security; Departments and personnel for personal data protection in agencies and organizations. Graphics: Tri Minh

Which forces are involved in protecting personal data?

|

Reader with email doantrangxxx@gmail.com sent a question: Which force is allowed to protect personal data?

From January 1, 2026, the maximum fine in administrative violations for violations in the field of personal data protection is 3 billion VND. Graphics: Thien Nhan

Violations of personal data protection are fined up to 3 billion VND

|

Reader with email dinhthangxxx@gmail.com asks: What is the maximum fine for violations of personal data protection?

Login name, access password of bank accounts; bank card information, transaction history data of bank accounts are sensitive personal data. Photo: Khanh An

What types of sensitive personal data include?

|

Reader with email manhhungxxx@gmail.com sends a question: What types of personal data are considered sensitive data?

Personal data collected through audio and video recordings in public places must only be processed and used in accordance with the processing purpose, not used for illegal purposes or infringing upon the legitimate rights and interests of the personal data subject. Graphics: Thien Nhan

Protect personal data collected from audio and video recordings in public places

|

Reader levyxxx@gmail.com asks: How is the protection of personal data collected from audio and video recording activities in public places regulated?

The case of transborder personal data transfer includes transferring personal data stored in Vietnam to a data storage system located outside the territory of the Socialist Republic of Vietnam. Graphics: Tri Minh

Cases of cross-border personal data transfer

|

Reader with email duykhanhxxx@gmail.com asks: What cases are allowed to transfer personal data across borders?

Organizations and individuals providing social network and online communication services are responsible for clearly notifying the content of personal data collected when the subject of personal data sets up and uses social networks and online communication services. Photo: VGP

Protecting personal data against social media platforms

|

Reader with email duytuanxxx@gmail.com asks: How is personal data protection for social network platforms regulated?

In case it is to serve the activities of state agencies, state management activities according to the provisions of law, the processing of personal data will not require the consent of the personal data subject. Photo: Ministry of Public Security

Cases of processing personal data without the consent of the subject

|

Reader with email phandauxxx@gmail.com asks: In what cases is personal data processed without the consent of the personal data subject?

Agencies and recruitment agencies must delete and destroy personal data information provided by candidates in case of non-recruitment. Graphics: Thien Nhan

Responsibility for protecting personal data in recruitment and management of employees

|

Reader with email kyquanxxx@gmail.com asks: How is the protection of personal data in recruitment, management, and use of employees regulated?

The personal data controller is responsible to the personal data subject for the damage caused by the personal data processing process. Photo: VGP

10 responsibilities of personal data controllers

|

Reader with email tatthangxxx@gmail.com asks: What are the responsibilities of the personal data controller?

Employers must delete or destroy personal data provided by employees if they are not recruited, unless there is a different agreement with the applicant. Photo: Duc Long

Personal data provided by employees must be deleted if they are not recruited

|

Recruitment organizations must delete and destroy personal data provided by employees if they are not recruited.

Human rights, citizen rights are recognized, respected, protected and not denied just because they are exercised in a digital environment. Photo: Hai Nguyen

Citizen rights in the digital environment according to new regulations

|

Reader with email hoanghanxxx@gmail.com asks: How are citizen rights in the digital environment regulated?