Social networks are not required to provide citizen identification to verify accounts.

Deputy Prime Minister Le Thanh Long - Photo: GIA HAN

That is one of the provisions in the draft Law on Personal Data Protection, which Deputy Prime Minister Le Thanh Long, on behalf of the Government, read at the 9th session of the 15th National Assembly on the afternoon of May 5.

Regarding the purpose of the law, Mr. Long said that the development of the Law on Personal Data Protection aims to perfect the legal system on personal data protection, improve the capacity to protect personal data for domestic organizations and individuals to reach international and regional levels.

Promote the legal use of personal data to serve economic and social development.

This draft law has 7 chapters with 68 articles. Notably, there is a chapter on personal data protection during the processing of personal data.

According to the bill, the data subject's consent applies to all activities in the processing of personal data, unless otherwise provided by law.

The consent of the data subject is only valid if it is based on voluntariness and clearly states the following: type of personal data processed; purpose of processing personal data; organization or individual whose personal data is processed; rights and obligations of the data subject.

On the other hand, the data subject's consent must be given by an affirmative action that constitutes a clear, specific indication, such as in writing, by voice, by ticking a consent box, by text message consent syntax, by selecting technical consent settings or by another action that demonstrates this.

Silence or non-response of the data subject shall not be considered as consent.

The bill has a separate provision regulating the protection of personal data for social networking platforms and online communication services. It clearly stipulates the responsibilities of organizations and individuals providing services.

These organizations and individuals are responsible for protecting the personal data of Vietnamese citizens when operating in the Vietnamese market or appearing on mobile application stores provided to the Vietnamese market.

Along with that, clearly notify the content of personal data collected when data subjects install and use social networks and online communication services; do not illegally collect personal data and beyond the scope of the agreement with customers;

Notably, these organizations and individuals are not allowed to request images or videos containing full or partial identity cards, citizen identification cards, or national identity cards as a factor in account authentication.

Provide users with the option to opt out of cookie collection and cookie sharing. Provide a "do not track" option or to have social media and online media usage tracked only with the user's consent;

Provide specific, clear, written notice of the sharing of personal data as well as the application of security measures when conducting advertising and marketing activities based on customers' personal data;

Do not eavesdrop, wiretap or record calls and read text messages without the consent of the data subject. Provide a mechanism for users to report security and privacy violations.

Organizations and individuals providing services must also publicly disclose their privacy policies, clearly explaining how personal data is collected, used and shared. Provide users with the right to access, edit, delete data and set privacy for personal information; protect the personal data of Vietnamese citizens when transferred outside of Vietnam.

Establish a mechanism for users to report violations of personal data protection; develop a process for handling violations of personal data protection quickly and effectively.

In addition, data subjects must be notified of incidents and violations of regulations on personal data protection regarding social network accounts and online communication services within 72 hours of the occurrence of the violation or incident, along with the results of handling, remedying the consequences, assessing the severity of the incident and potential risks arising.

Supplementing regulations to protect the rights and interests of parties controlling and processing personal data

Examining the draft law, the National Defense, Security and Foreign Affairs Committee said that some opinions said that the provisions in the draft law are absolutizing the rights of personal data subjects, which can easily lead to abuse of rights, causing obstacles and difficulties in the data processing process of parties controlling and processing personal data.

The Committee basically agrees with the above opinions and proposes to study and incorporate additional regulations to protect the rights and interests of parties controlling and processing personal data when implementing requests from personal data subjects to ensure harmony between the rights and interests of relevant parties.

Tuoitre.vn

Source: https://tuoitre.vn/mang-xa-hoi-khong-duoc-yeu-cau-cung-cap-can-cuoc-cong-dan-de-xac-thuc-tai-khoan-20250505150533067.htm#content