Soon have sanctions, meet practical requirements

The buying and selling of personal data is still widespread and public.

Implementing Decree No. 13/2023/ND-CP dated April 17, 2023 of the Government on personal data protection, a representative of the Ho Chi Minh City Police Department said that the situation of network security and information security in Ho Chi Minh City is basically stable, the city's information systems are guaranteed to operate continuously, without serious network security incidents; the posting of news and articles on pages and electronic information portals of state agencies is ensured to comply with regulations on protecting state secrets.

Deputy Chairman of the National Defense, Security and Foreign Affairs Committee Nguyen Minh Duc speaks at the meeting. Photo: Tinh Ha

In addition to the achieved results, there are still potential risks of information security and safety. Specifically, information security monitoring at the Ho Chi Minh City Data Center recorded 2 cases of information security and safety loss; surveillance and monitoring camera devices of many agencies, organizations, businesses and individuals in the city had security holes that were at risk of being appropriated in 7 cases, even in cases where businesses and organizations disclosed and leaked user information and data. Activities of attacking, appropriating, buying and selling personal information and data on cyberspace took place openly on a number of forums, groups, and organized into large-scale networks. In particular, recently, the buying and selling of personal data has been common and public through websites, accounts, pages, and groups on social networks Telegram, Facebook, hacker forums, etc.

The working delegation of the National Defense, Security and Foreign Affairs Committee conducted a field survey at the STT VNG Ho Chi Minh City Data Center 1. Photo: Tinh Ha

The working delegation of the Committee for National Defense, Security and Foreign Affairs conducted a field survey at the STT VNG Ho Chi Minh City Data Center 1

According to Deputy Head of Department PA05, Ho Chi Minh City Police, Vo Minh Hai, currently, the handling of violations related to the collection, processing and transfer of personal data is still limited due to the lack of specific legal regulations to handle administrative violations as well as criminal handling of violations of personal data protection; the situation of crimes taking advantage of cyberspace and using high technology is becoming more and more complicated, the subjects use many new tools and methods that are highly anonymous, borderless or take advantage of the lack of close coordination between functional agencies to commit crimes of collecting information, selling user data, causing difficulties for investigation and handling. Meanwhile, some units, cadres, civil servants and public employees still have limited awareness in ensuring information security, safety, and protecting personal data, leading to the potential risk of revealing and losing state secrets in cyberspace and revealing personal data.

Deputy Director of Ho Chi Minh City Police Nguyen Thanh Huong also said that with the current technological development, it is common that many units and businesses that collect, process and transfer data have not really paid attention to investing in policies and technical measures in the process of processing data flows. The collection and transfer of personal data in business activities of businesses have not been carried out in accordance with regulations, and there is still a situation of using it for different purposes in the process of collecting user data.

As a company operating in the field of technology and providing services on the internet environment, VNG Joint Stock Company (District 7) always respects and ensures the processing and use of personal data in the process of providing services. However, according to Chairman of the Board of Directors of VNG Le Hong Minh, for a business with many product and service groups like VNG, there are still some difficulties in the process of operation.

Specifically, due to the increasing complexity of data processing activities, it is difficult for businesses to identify the types of personal data processed, the processing activities and ownership at each stage of the data life cycle, thereby clearly differentiating responsibilities for each subject, at each stage of the data processing process. In addition, businesses also face difficulties in designing forms, establishing appropriate methods and forms of collecting consent, and at the same time having to manage and store evidence of the collected information. These have more or less affected and led to changes in many product models, system changes, consuming a lot of resources and financial resources...

The survey delegation of the National Defense, Security and Foreign Affairs Committee worked with the Ho Chi Minh City Police. Photo: Tinh Ha

General Director of Trusting Social Joint Stock Company (District 1) Nguyen An Nguyen also said that legal regulations on personal data protection are constantly updated and changed, requiring continuous monitoring, research and adjustment of internal processes to ensure compliance, causing pressure on time and resources. Along with that, ensuring that partners and service providers comply with regulations on personal data protection is a big challenge. Not to mention, raising awareness and skills on personal data protection for all employees is a continuous process and requires investment in time and resources.

Proposal to soon have sanctions to handle violations

At the working session with the Survey Team of the National Defense, Security and Foreign Affairs Committee to review, receive and revise the draft Law on Personal Data Protection, Ho Chi Minh City Police proposed that in order to prevent acts of personal data infringement, affecting the rights and interests of individuals and organizations, it is necessary to promptly study and advise on legal regulations on sanctions for violations to meet the practical requirements of state management of personal data protection, the fight against, prevention and control of crimes of violating the law on personal data protection; promptly promulgate the List of technical standards on personal data protection.

Members of the Survey Team at the working session with Ho Chi Minh City Police

To ensure specialized human resources for personal data protection, especially in the police of units and localities at the commune and ward levels after the merger and streamlining of the apparatus, it is proposed to open training courses, instructing on methods, skills, and experiences for the staff directly responsible for personal data protection. At the same time, research and adjust documents to ensure compliance with the functions and tasks of the police of units and localities in combating, handling, preventing and combating violations of the law on personal data.

Speaking at the meeting, Deputy Chairman of the National Defense, Security and Foreign Affairs Committee Nguyen Minh Duc highly appreciated the achievements of the Ho Chi Minh City Police in the fight against violations of the law on personal data protection. In the digital age, personal data has become a valuable asset, not only for individuals but also for businesses, organizations and technology platforms. However, the situation of criminals taking advantage of cyberspace and using high technology is becoming increasingly complicated, with criminals using many tools on cyberspace leading to the disclosure of personal data. In addition, the rapid increase in data collection, processing and exploitation activities also poses great risks to privacy, information security and is always at risk of being attacked and abused.

Vice Chairman of the Committee Nguyen Minh Duc stated that the development of the Law on Personal Data Protection aims to perfect the legal system on personal data protection, create a legal corridor for personal data protection, and enhance the capacity to protect personal data for organizations and individuals. At the same time, he requested the Ho Chi Minh City Police to continue studying the contents of the draft Law to contribute to the protection of personal data during data processing, as well as to protect national security in cyberspace.

Member is a full-time National Assembly member at the Committee for National Defense, Security and Foreign Affairs Vu Xuan Hung speaking at the meeting.

Member, a full-time National Assembly member at the National Defense, Security and Foreign Affairs Committee Vu Xuan Hung emphasized that Ho Chi Minh City Police is the city's specialized agency in protecting personal data, and handling violations in the process of storing, collecting, controlling, using, and protecting personal data will certainly have a very high responsibility. Therefore, from practical work, Ho Chi Minh City Police added comments on issues such as regulations on handling violations, dissolution or separation of enterprises, merger of administrative units, how is data storage preserved? In addition, there is the deletion of data in the draft law, data protection in cyberspace, especially on social networking platforms...

Article and photos: Tinh Ha

Source: https://daibieunhandan.vn/som-co-che-tai-dap-ung-yeu-cau-thuc-te-post410261.html