Personal data protection a step forward in ensuring human rights

With the development of information technology today, it has created conditions for industries to develop strongly, the number of people participating in cyberspace has increased rapidly, currently Vietnam has about 75% of the population participating in cyberspace and the digital environment. Accordingly, personal data has become an important asset and the main raw material for the activities of agencies, organizations, businesses, and individuals. However, the situation of revealing, leaking, stealing, buying, selling, exchanging... personal data for illegal purposes is becoming increasingly serious and common.

Personal data protection is the activity of preventing, detecting, stopping, and handling violations related to personal data according to the provisions of law. Personal data is only processed for the purposes registered by the personal data controller, the personal data processor, the personal data controller and processor, the third party, the declaration of personal data processing, the agency, organization, or individual violating the regulations on personal data protection, depending on the severity, may be subject to disciplinary action, administrative sanctions, or criminal prosecution according to the regulations. [caption id="attachment_1200339" align="aligncenter" width="1080"] Personal data protection is a step forward in ensuring human rights Collection[/caption] Personal data protection is implemented in accordance with the provisions of international treaties to which the Socialist Republic of Vietnam is a member, other provisions of relevant Laws and this Decree. Regarding international cooperation on personal data protection to facilitate effective enforcement of laws on personal data protection, participation in mutual legal assistance on personal data protection of other countries, including notification, request for complaints, assistance in investigation and exchange of information, with appropriate protection measures to protect personal data. Acts considered prohibited include processing personal data in violation of the provisions of the law on personal data protection, such as processing personal data to create information and data against the Socialist Republic of Vietnam, processing personal data to create information and data that affect national security, social order and safety, and the legitimate rights and interests of other organizations and individuals, obstructing the personal data protection activities of competent authorities, and taking advantage of personal data protection activities to violate the law. [caption id="attachment_1200343" align="aligncenter" width="600"] Personal data protection is a step forward in ensuring human rights Collection[/caption] Regarding the rights of data subjects to know about the processing of their personal data, unless otherwise provided by law, to consent or not to allow the processing of their personal data, unless otherwise provided by law, the right to access, view, edit or request the editing of their personal data, unless otherwise provided by law, the right to withdraw consent, the right to delete data, the right to restrict data processing, the right to provide data, the right to complain, denounce, initiate a lawsuit, the right to request compensation for damages, the right to self-protection Regarding the obligations of data subjects, including self-protection of their personal data; Require other relevant organizations and individuals to protect their personal data, respect and protect the personal data of others, provide complete and accurate personal data when agreeing to allow the processing of personal data, participate in the dissemination and popularization of personal data protection skills, implement the provisions of the law on personal data protection and participate in preventing and combating violations of regulations on personal data protection. Regarding the protection of personal data during the data processing process such as the consent of the data subject, the withdrawal of consent does not affect the lawfulness of the data processing agreed upon before the withdrawal of consent and must be expressed in a format that can be printed, copied in writing, including in electronic form or verifiable format. In particular, regarding contents such as notification of personal data processing, provision of personal data, editing of personal data, storage, deletion, and destruction of personal data, the processing of personal data without the consent of the data subject is also specifically regulated. Regarding the processing of personal data collected from recording and filming activities in public places, competent agencies and organizations are allowed to record, film, and process personal data collected from recording and filming activities in public places for the purpose of protecting national security, social order and safety, and the legitimate rights and interests of organizations and individuals according to the provisions of law without the consent of the subject. When recording and filming, competent agencies and organizations are responsible for notifying the subject to understand that they are being recorded and filmed, except in cases where the law provides otherwise. The processing of personal data relating to the personal data of a person declared missing or deceased must have the consent of the spouse or adult child of that person, or in the absence of such persons, the consent of the parent of the person declared missing or deceased. The processing of personal data of children must always be carried out in accordance with the principle of protecting the rights and in the best interests of the child and must have the consent of the child in the case of a child aged 7 years or older and with the consent of the parent or guardian as prescribed, except in cases prescribed. In addition, regarding the protection of personal data in marketing services, advertising product introduction, illegal collection, transfer, purchase and sale of personal data, notification of violations of regulations on personal data protection, assessment of the impact of personal data processing, transfer of personal data abroad, measures to protect personal data, basic personal data protection, protection of sensitive personal data, specialized agencies for personal data protection and the National Portal on personal data protection, conditions to ensure personal data protection activities are also guaranteed.