Vice Chairman of the National Assembly Tran Quang Phuong chaired the meeting. Photo: Phuong Hoa/VNA


Proposal to specify types of personal information and data

During the discussion, delegates highly agreed with the necessity of promulgating this law and assessed that the Drafting Committee had accepted many valid opinions. According to delegate Hoang Minh Hieu ( Nghe An ), the completion of the law on personal data protection is an important step in the process of perfecting the legal system to meet the requirements of protecting human rights, personal rights, as well as the requirements of digital transformation in Vietnam... "Through research, we also found that the provisions of the draft have basically approached international standards" - the delegate assessed.

Commenting on the distinction between basic personal data and sensitive personal data, the delegate said that it is necessary for the draft Law to distinguish between types of personal data, including basic personal data and sensitive personal data, because sensitive data requires stricter protection measures.

The delegate cited that, according to the draft, the protection of personal data in the fields of health, insurance, finance, and banking must apply regulations on the protection of sensitive personal data. According to the experience of many countries, sensitive personal data is important content, related to the rights of individuals, so the laws of these countries often stipulate some sensitive personal data in the law. For example, according to Japanese law, there are data such as social status, medical records, criminal records, etc. Chinese law lists sensitive data including biometric identification, religious beliefs, medical data, health care, financial accounts, and location tracking data.

Therefore, the delegate suggested that the drafting agency could stipulate some basic types right in the law, while the Government would stipulate and supplement other information in accordance with the requirements of each period.

In addition, delegates proposed adding regulations to improve the legal basis for protecting personal data in the digital age, including vulnerable groups in society - such as people with disabilities, the elderly, ethnic minorities, and illiterate people, who are vulnerable to personal data violations and are unable to protect themselves.

Delegate Duong Tan Quan (Ba Ria - Vung Tau) proposed adding a separate law regulating the processing of personal data for vulnerable groups. This would require the consent of a legal representative, presentation of information in an easy-to-understand format, appropriate language, and technical assistance if necessary.

National Assembly delegate of Ba Ria - Vung Tau province Duong Tan Quan speaks. Photo: Phuong Hoa/VNA

Regarding the improvement of personal data protection capacity, delegates said that although the draft has a comprehensive approach from policy to education, it still lacks specific training orientation. Priority training subjects must be clearly identified, such as civil servants, technology enterprises, or citizens; at the same time, specific training programs must be developed at each level: from general education, vocational education to civil service training.

Delegates are also concerned about preventing the disclosure of personal data and illegal data trading activities that affect people's lives.

Delegate Nguyen Thi Viet Nga (Hai Duong) stated that in recent times, the phenomenon of personal data leakage has become increasingly common and sophisticated. Information such as phone numbers, email addresses, bank account information, and medical records can all be collected, bought, sold, and used illegally. As a result, online fraud has exploded, despite the efforts of authorities in promoting and combating this type of crime.

Therefore, delegate Nguyen Thi Viet Nga said that perfecting legal regulations is extremely urgent to overcome legal gaps and enhance the effectiveness of state management, protect human rights in the digital space and promote the development of the digital economy in a safe and sustainable manner.

Regulations on prohibited conduct related to personal data

Minister of Public Security Luong Tam Quang explains clearly the issues raised by National Assembly deputies. Photo: Phuong Hoa/VNA

Speaking to clarify the opinions of the delegates, Minister of Public Security Luong Tam Quang emphasized that the early promulgation of the law is very necessary, and the Government has proposed that the National Assembly consider promulgating it and passing it at a session.

The Minister of Public Security emphasized that the goal of the law is to regulate the pressing issues of personal data infringement in practice. At the same time, it is also to forecast and cover new technologies to protect personal data most comprehensively.

“In fact, in the large-scale fraud and property appropriation cases that the police have recently fought and cracked down on, the main reason why criminals commit crimes is the exposure, leakage, and sale of personal data,” said the Minister. Personal data is bought and sold like goods in very large quantities, sold many times to many subjects for analysis, exploitation, and construction of fraud scenarios and accurate and easy access to victims.

According to the Minister, many organizations lack regulations, loose management policies, and decentralization of personal data processing, leading to employees obtaining customer information with very high accuracy and updated over time to sell to scammers, especially in the fields of finance, banking, telecommunications, electricity, insurance, and shipping and delivery.

“If there are no regulations prohibiting the buying and selling of personal data as normal goods and no strict sanctions, in practice there will arise many methods and tricks to form a black market for personal data, causing huge damage and insecurity for the people,” Minister Luong Tam Quang emphasized.

Based on the practical work of combating personal data infringement, the Government has submitted to the National Assembly a draft law regulating prohibited acts related to personal data, including the buying and selling of personal data. In addition, the draft law has supplemented and adjusted to regulate the activities of renting and borrowing personal data to commit illegal acts.

According to baotintuc.vn

Source: https://huengaynay.vn/chinh-tri-xa-hoi/theo-dong-thoi-su/lo-lot-mua-ban-thong-tin-du-lieu-ca-nhan-la-nguyen-nhan-chinh-khien-cac-doi-tuong-thuc-hien-hanh-vi-pham-toi-153945.html