Illustration photo.
The Ministry of Public Security has just informed about the Law on Personal Data Protection. In which, the law stipulates personal data, personal data protection and the rights, obligations and responsibilities of relevant agencies, organizations and individuals.
The law comes into force from January 1, 2026.
Notably, the Law on Personal Data Protection clearly stipulates the protection of personal data in financial, banking and credit information activities.
According to Article 27, organizations and individuals operating in the fields of finance, banking, and credit information activities are responsible for fully implementing regulations on protecting sensitive personal data, safety and security standards in financial and banking activities as prescribed by law;
Do not use the credit information of personal data subjects to score, rank credit, evaluate credit information, or evaluate the creditworthiness of personal data subjects without the consent of the personal data subjects;
Only collect personal data necessary for credit information activities from sources in accordance with the provisions of this Law and other relevant legal provisions.
Notify the personal data subject in case of disclosure or loss of information about bank accounts, finances, credit, credit information.
Organizations and individuals conducting credit information activities are responsible for complying with the provisions of this law; applying measures to prevent unauthorized access, use, disclosure, and editing of customers' personal data; having solutions to restore customers' personal data in case of loss; ensuring confidentiality in the process of collecting, providing, and processing customers' personal data to serve credit information assessment...
In addition, Article 26 also regulates the protection of personal data regarding health information and in insurance business activities.
Agencies, organizations and individuals operating in the health sector shall not provide personal data to third parties that are organizations providing health care services or health insurance or life insurance services, except in cases where there is a written request from the personal data subject or in cases specified in Clause 1, Article 19 of this Law.
Similarly, organizations and individuals developing medical applications and insurance business applications must fully comply with regulations on personal data protection.
In particular, in cases where a business conducts reinsurance or reinsurance and transfers personal data to partners, this must be clearly stated in the contract with the customer.
Agencies, organizations and individuals recruiting labor also need to note that they are only required to provide information serving the recruitment purposes of the recruiting agency, organization or individual in accordance with the provisions of law;
The information provided will only be used for recruitment purposes and other purposes as agreed in accordance with the provisions of law;
The information provided must be processed in accordance with the provisions of law and must have the consent of the applicant; The information provided by the applicant must be deleted or destroyed in case of non-recruitment, unless otherwise agreed with the applicant" (Article 25).
![[Video] The craft of making Dong Ho folk paintings has been inscribed by UNESCO on the List of Crafts in Need of Urgent Safeguarding.](https://vphoto.vietnam.vn/thumb/402x226/vietnam/resource/IMAGE/2025/12/10/1765350246533_tranh-dong-ho-734-jpg.webp)
Comment (0)