What are sensitive personal data?

Legal Consulting Department of Lao Dong Newspaper answers:

Clause 1, Article 4, Decree 356/2025/ND-CP stipulates the list of sensitive personal data as follows:

1. Sensitive personal data includes:

a) Data revealing racial origin, ethnic origin;

b) Viewpoints on politics, religion, beliefs;

c) Information about private life, personal secrets, family secrets;

d) Health status;

d) Biometric data, genetic characteristics;

e) Data revealing personal sexual life and sexual orientation;

g) Data on crimes and law violations collected and stored by law enforcement agencies;

h) The location of the individual is determined through a positioning service;

i) Information on the username and password to access the electronic identification account of the individual; ID card image, citizen ID card, identity card;

k) The login name, access password of the bank account; bank card information, data on the transaction history of the bank account; financial, credit information and information on operations, financial transaction history, securities, insurance of customers at credit institutions, foreign bank branches, intermediary payment service providers, securities, insurance, other licensed organizations;

l) Data tracking of behavior, activities using telecommunications services, social networks, online communication services and other services in cyberspace;

m) Other personal data that is prescribed by law that needs to be kept secret or requires strict security measures.

Thus, sensitive personal data includes the above information.