Intentionally leaking citizen identification cards causing damage, fined up to 20 million VND

Legal Consulting Department of Lao Dong Newspaper answers:

Point a, Clause 2, Article 4 of the 2025 Law on Protection of Personal Data stipulates that the subject of personal data has the obligation to protect its own personal data.

Point a, Clause 1, Article 42 of Decree No. 330/2026/ND-CP stipulating penalties for administrative violations in the field of network security and personal data protection (effective August 19, 2026) stipulates as follows: A fine of between 10 million VND and 20 million VND shall be imposed for one of the following acts: Intentionally disclosing or losing personal data of oneself, affecting social order and safety or causing damage to relevant agencies, organizations, and individuals.

Clause 7, Article 3, Decree 356/2025/ND-CP, stipulates that the basic list of personal data includes: Phone number, personal identification number, passport number, driver's license number, license plate number.

Clauses 1, 3, Article 12 of the 2023 Identity Card Law stipulate as follows:

1. The personal identification number of a Vietnamese citizen is a natural number sequence of 12 digits established by the National Population Database for Vietnamese citizens.

3. Personal identification numbers of Vietnamese citizens used to issue ID cards, exploit information about citizens in the National Population Database and national databases, specialized databases, national data centers and public service portals, administrative procedure information systems.

Thus, from August 19, 2026, people who intentionally leak citizen identification numbers, causing damage to relevant agencies, organizations, and individuals may be fined up to 20 million VND.