Deputies to Vietnam's 16th National Assembly will discuss several bills, including the draft Data Security Law, on October 26 during the second sitting.
The bill aims to put into law the Party's guidelines on safeguarding the Fatherland in cyberspace and developing the digital economy. It identifies data security as an urgent requirement throughout the country's digital transformation.
The draft comprises six chapters and 29 articles. It sets out general principles, specific protection mechanisms, resources for protection and State management of data security.
Its core provisions define the scope of regulation, introduce risk-based management, require data security throughout the data lifecycle, provide for the prevention of and response to incidents, and support the development of technology, infrastructure and human resources for data security.
The draft defines the scope of the law, the principles for applying it and its boundaries with specialised legislation, to keep the legal system consistent.
The principles and conditions for processing personal data, and the rights of personal data subjects, will continue to be governed by the law on personal data protection. The creation, governance, exploitation, sharing and classification of data according to its importance will be governed by data-related legislation, while the protection of information systems against cyber threats will be governed by the law on cybersecurity.
The security of the data itself throughout its lifecycle will be governed by the Law on Data Security.
The draft sets out five data security risk levels, from Level 1, the lowest, to Level 5, the highest. The levels will be determined by the likelihood of incidents and potential damage to national defence and security, social order and safety, and the legitimate rights and interests of organisations and individuals.
The higher the risk associated with the data, the stricter the protection obligations should be.
The draft requires data security throughout the lifecycle, from collection, storage, processing and transmission to destruction. It provides for strict, differentiated controls based on risk levels over cross-border data transfers and processing to safeguard national data sovereignty.
On October 26, deputies will also hear submissions and verification reports on draft laws concerning the protection of important works related to national security; electronic identification and authentication; amendments to laws on weapons, explosives and supporting tools, fire prevention, firefighting, rescue and salvage, and administrative violations.
They will also discuss a draft law amending and supplementing provisions of the Law on Measurement.
Sources: VietnamPlus / Vietnam News Agency
