Proposal to not require photo ID to verify social media accounts

Proposal not to require ID photo to verify social media accounts. Illustration photo: Source: NHAN DAN

In fact, personal data disclosure has been common in cyberspace in recent times. Users have not been aware of protecting personal data, posting it publicly or exposing it during the process of transferring, storing, exchanging for business purposes or due to inadequate protection measures leading to its appropriation and public posting. Many activities of collecting and processing personal data do not have the consent of the data subject, and it is impossible to obtain consent for the personal data collected.

The buying and selling of personal data is currently widespread and public, and many acts have not been handled due to the lack of legal regulations. The lack of specific regulations on data protection in this environment has led to many violations and potential risks.

Therefore, according to the Ministry of Public Security, the development of the Law on Personal Data Protection is extremely necessary to meet the requirements of protecting personal data rights; prevent acts of personal data infringement, affecting the rights and interests of individuals and organizations; create a legal corridor for personal data protection, improve the capacity of personal data protection for domestic organizations and individuals to reach international and regional levels; promote the lawful use of personal data to serve economic and social development.

Must comply with the principles of personal data protection

Accordingly, the draft provides specific provisions on the "Principles of Personal Data Protection". Specifically, personal data is processed publicly and transparently. Data subjects are informed about activities related to the processing of their personal data, unless otherwise provided by other laws. Personal data is only processed for the purposes registered and declared by the personal data controller, personal data processor, personal data controller and processor, and third party regarding the processing of personal data. Personal data collected must be appropriate and limited to the scope and purpose of processing.

Personal data is subject to protection and security measures during processing, including protection against violations of personal data protection regulations and prevention of loss, destruction or damage due to incidents, using technical measures.

Personal data is only stored for the period relevant to the purposes for which the data is processed, unless otherwise provided by law.

No photo ID required for account verification

Regarding regulations on protecting personal data on social networks and online communication services (OTT), the draft Law on Personal Data Protection clearly states that organizations and individuals providing social network services and online communication services are responsible for:

Protect personal data of Vietnamese citizens when operating in the Vietnamese market or appearing on mobile application stores provided to the Vietnamese market; clearly notify the content of personal data collected when data subjects install and use social networks and online communication services; do not illegally collect personal data and beyond the scope of the agreement with customers.

Notably, the draft Law stipulates that it is not allowed to require images or videos containing full or partial identity, citizen identification, or national identity cards as a factor in account authentication; provide an “do not track” option or only track social network and online communication service usage activities with the user’s consent.

At the same time, it is required to provide specific, clear, written notice about the sharing of personal data as well as apply security measures when conducting advertising and marketing activities based on customers' personal data; not to eavesdrop, wiretap or record calls and read text messages without the consent of the data subject; provide a mechanism for users to report violations of security and privacy; establish a mechanism for users to report violations of personal data protection; develop a process for handling violations of personal data protection quickly and effectively...

Source: https://baotuyenquang.com.vn/de-xuat-khong-duoc-yeu-cau-chup-anh-can-cuoc-de-xac-thuc-tai-khoan-mang-xa-hoi-209392.html