Proposal to ban the use of AI to simulate faces for fraud and defamation

This morning, authorized by the Prime Minister, General Luong Tam Quang, Minister of Public Security, presented the draft Law on Cyber Security to the National Assembly .

Proposing network operators to provide user IPs to security agencies

Minister Luong Tam Quang said the draft Law on Cyber Security consists of 9 chapters and 58 articles, including 30 provisions inherited from the 2018 Law on Cyber Security, 16 provisions inherited from the 2015 Law on Network Information Security; 9 consolidated provisions and 3 new provisions added.

General Luong Tam Quang, Minister of Public Security, presented the draft law. Photo: National Assembly

According to the Minister, the new points focus on issues such as adding regulations on ensuring data security; adding regulations on responsibility for identifying IP addresses and providing them to specialized forces for protecting network security.

The draft law also adds regulations on funding for cybersecurity protection of agencies, organizations, state-owned enterprises, and political organizations; adds regulations on encouraging the use of Vietnamese security industry products and services...

The draft law classifies information system levels as determining the cybersecurity level of an information system to apply appropriate and corresponding protection measures according to each increasing level from 1 to 5.

Level 1 is the level where an incident, intrusion, hijacking, distortion, interruption, stagnation, paralysis, attack or sabotage will harm the legitimate rights and interests of organizations and individuals but will not harm public interests, social order and safety, national defense and security.

Level 2 is the level where, when an incident, intrusion, hijacking, distortion, interruption, stagnation, paralysis, attack or sabotage occurs, it will seriously damage the legitimate rights and interests of organizations and individuals or damage public interests but not damage social order, safety, national defense and security.

Level 3 is the level where an incident, intrusion, hijacking, distortion, interruption, stagnation, paralysis, attack or sabotage will seriously damage production, public interests and social order and safety or damage national defense and security.

Level 4 is the level where, when an incident, intrusion, hijacking, distortion, interruption, stagnation, paralysis, attack or sabotage occurs, it will cause especially serious damage to public interests and social order and safety or seriously damage national defense and security.

Level 5 is the level where an incident, intrusion, hijacking, distortion, interruption, stagnation, paralysis, attack or sabotage will cause especially serious damage to national sovereignty , interests, defense and security.

Notably, the draft law stipulates the responsibility of enterprises providing services in cyberspace, which is to identify the internet address (IP address) of organizations and individuals using internet services, and provide it to the specialized force in charge of protecting network security for management to serve the work of ensuring network security.

Full list of prohibited acts

Presenting the inspection report, Chairman of the National Defense, Security and Foreign Affairs Committee Le Tan Toi said that among the prohibited acts regarding cybersecurity, the inspection agency proposed to review and supplement all prohibited acts, especially acts of using artificial intelligence (AI) to create, edit, and spread false information, fake identities to slander, defraud, and harm national security and social order.

Chairman of the National Defense, Security and Foreign Affairs Committee Le Tan Toi presents the inspection report. Photo: National Assembly

Regarding cybersecurity protection, the Committee on National Defense, Security and Foreign Affairs proposed to specify tasks and protection measures for each level of information systems (levels 1 to 5) to increase feasibility, or assign the Government to specify details.

The auditing agency also proposed to review and unify the levels of damage between objects when classifying information systems to ensure logic and ease of application in implementation.

Mr. Le Tan Toi said that in preventing and handling cyber security violations, it is recommended that in addition to protecting children, it is necessary to add protection objects such as vulnerable people such as the elderly and people who have lost or have limited civil capacity.

The inspection agency also proposed adding regulations to prevent, stop, and promptly handle acts of using AI to simulate faces to defraud, defame, and impersonate the identities of celebrities or their relatives.

Source: https://vietnamnet.vn/de-nghi-cam-su-dung-ai-mo-phong-khuon-mat-nguoi-noi-tieng-de-lua-dao-boi-nho-2458085.html