National Assembly passes Law on Personal Data Protection, many acts are prohibited, heavily punished

Many regulations protect personal data - Photo: National Assembly

The Law stipulates prohibited acts, including: prohibiting the processing of personal data to oppose the State, affecting national defense, national security, social order and safety, and the legitimate rights and interests of agencies, organizations and individuals.

Many acts are strictly prohibited and severely punished if violated.

Other prohibited cases include obstructing personal data protection activities. Taking advantage of personal data protection activities to commit illegal acts. Processing personal data in violation of the law.

Using other people's personal data or allowing others to use your personal data to commit illegal acts is also prohibited. Buying or selling personal data, unless otherwise provided by law. Appropriating, intentionally disclosing or losing personal data.

Organizations and individuals violating the protection of personal data may be subject to administrative sanctions or criminal prosecution; if causing damage, they must compensate.

Specifically, the maximum fine for administrative violations of buying and selling personal data is 10 times the amount of revenue; for organizations violating regulations on transferring personal data across borders, it is 5% of the organization's revenue in the previous year or other regulations... The law requires the protection of personal data during data processing to have the consent of the subject allowing the use of the data. The subject also has the right to withdraw consent and request restriction of personal data processing when there is a suspicion of violation.

At the same time, personal data is only disclosed in specific cases; personal data is processed without consent in some cases related to health protection, emergencies, national security threats, state management, agreements... with close supervision.

The newly passed law also stipulates the protection of personal data in a number of activities. Notably, financial, banking and credit activities must fully comply with regulations on the protection of sensitive personal data.

How to use personal data on social networks?

Chairman of the National Assembly's Committee on National Defense, Security and Foreign Affairs Le Tan Toi - Photo: National Assembly

In advertising activities, the customer's consent must be obtained, on the basis that the customer clearly knows the content, method, form, and frequency of product introduction; provide a method for customers to refuse to receive advertising information.

For social media platforms, online advertising must not collect personal data illegally and beyond the scope of the agreement; Must not require providing images, videos containing full content or part of identity documents as a factor in account authentication.

Social networks should also not provide an “do not track” option or should only track social network or online media service usage with the user’s consent.

Along with that is the regulation of not eavesdropping, wiretapping or recording calls and reading text messages without the consent of the personal data subject, unless otherwise provided by law; Publicizing the privacy policy, clearly explaining how personal data is collected, used and shared.

Explaining the acceptance of the bill before delegates voted to pass it, Chairman of the National Assembly's Committee on National Defense, Security and Foreign Affairs Le Tan Toi said that the application of fines in the law aims to ensure deterrence for the nature and serious consequences of violations, especially for large enterprises and multinational corporations with revenues of thousands of billions.

Regarding prohibited acts, Mr. Toi stated the viewpoint of the National Assembly Standing Committee to promptly prevent the act of illegally collecting and selling personal data packages on cyberspace or people within organizations to commit large-scale fraud and property appropriation, causing outrage in recent times.

Personal data cannot be traded like ordinary goods because it is associated with personal rights and privacy rights. In reality, many personal data are used by criminals for trading, buying, selling, and renting, so there needs to be strict regulations on this issue.

Tuoitre.vn

Source: https://tuoitre.vn/quoc-hoi-thong-qua-luat-bao-ve-du-lieu-ca-nhan-nhieu-hanh-vi-bi-cam-xu-phat-nang-20250626092822709.htm