November 8, 2023
HÀ NỘI – On April 17, the Government released a new Decree on Personal Data Protection, outlining measures and conditions to safeguard personal data.
Effective July 1, 2023, the decree stipulates that protecting personal data falls on organisations and individuals involved in processing such data.
These entities must implement management and technical measures to ensure compliance. State management agencies are also tasked with implementing measures under the decree and related laws and regulations.
Additionally, State agencies are responsible for investigating and prosecuting any personal data protection breaches.
The decree also outlines the necessity for other measures as stipulated by law.
They must be applied from the beginning and throughout the process of handling personal data.
The Department of Cyber Security and Hi-tech Crime Prevention of the Ministry of Public Security is the specialised agency for the work, tasked with assisting the ministry in implementing State management on the protection of personal data.
The national portal on personal data protection provides information on policies of the Party and laws of the State on personal data protection; disseminates policies and laws on personal data protection; updates and receives related information and data through the internet; and provides information on the assessment of personal data protection activities of relevant agencies, organisations and individuals.
In addition, it also receives notifications of violations of regulations on personal data protection, issues warnings about risks and actions of infringing personal data as prescribed by law, and performs other activities following relevant regulations.
The decree specifies that agencies, organisations, and individuals are responsible for disseminating knowledge skills, raising public awareness of personal data protection, and ensuring material facilities and conditions for the specialised agency in implementing its tasks.
The Ministry of Public Security is assigned to develop specific programmes and plans to develop workforces specialising in the work.
Source: VietnamNews
Original link: https://vietnamnews.vn/politics-laws/1521355/government-issues-decree-on-personal-data-protection.html
CJEU confirms that competitors can sue each other for GDPR infringements A German pharmacy sued another pharmacy for failing to guarantee explicit consent when processing the health data of the clients as prescribed under GDPR. The German Court held that such activity does amount to unfair and unlawful practice. However, the Court was unsure whether […]
Learn more
EDPB’s Guidelines on Legitimate Intesrest Recently, the European Data Protection Board (“EDPB”) adopted Guidelines 01/2024 on processing of personal data based on Article 6(1)(f) GDPR (processing based on legitimate interest). Legitimate interest is one of the lawful grounds on which personal data can be processed. Its flexible nature makes it quite hard to actually apply […]
Learn more
Can data subjects be data controllers? With the rise of AI trained on user data, the question of whether data subjects be considered data controllers for the personal data in their AI prompts and outputs has once again taken the spotlight. This is not a new issue, the possibility of the data subjects acting as […]
Learn more