The challenge of protecting personal data

Digital transformation, digital economic development, and digital society building are trends of the times. Personal data is one of the main ingredients for digital transformation, digital economic development, and digital society building. The development of some new technologies also requires the protection of personal data, such as big data processing, artificial intelligence, cloud computing, blockchain, virtual universe, etc.

Currently, the situation of personal data leakage is common in cyberspace. In 10 large data leakage cases in Vietnam recently recorded by Viettel Cyber ​​Security system, there is 1 case of selling about 300GB of source code data and customer data of a technology unit; 2 cases of selling and sharing information of many large universities in Vietnam, with leaked data of about 500MB of database; 2 cases of selling source code data of some media and retail units with about 3.5 million records; 1 case of leaking system source code and customer data of a unit operating in the energy sector; 4 other cases of leaking and leaking personal information, with about 15GB of source code and approximately 4 million records. Authorities have quickly "plugged" the loophole and issued many recommendations to individuals and organizations, such as not providing phone numbers or bank accounts when making transactions or buying and selling...

Data on buying, selling, and exchanging objects contains very detailed information about individuals, organizations, and businesses: full name, date of birth, citizen identification number, address, phone number, bank account number (including balance), relatives, position, job position, etc. The above issues raise the need to protect personal data more urgently than ever.

The Law on Personal Data Protection has been passed by the National Assembly and will take effect from January 1, 2026. The date of application of the law is not far away, posing many urgent requirements to protect personal data. Therefore, to ensure strictness when organizations and units are allowed to exploit personal data, it is necessary to clearly stipulate the purpose of data use; list data sources to ensure authenticity and accuracy; and allowable time to store data. If the party whose data is exploited violates the rules, there must be a mechanism, a way to withdraw consent and a policy to delete and destroy personal data according to regulations.

When the law comes into effect, there are universal regulations, but for personal data, especially private data, there needs to be specific regulations, the clearer the easier it is to implement. This is to protect the rights and legitimate interests of agencies, organizations and individuals when personal information is leaked or leaked in relation to the law and community issues.

DO TRUNG

Source: https://www.sggp.org.vn/thach-thuc-bao-ve-du-lieu-ca-nhan-post818642.html