Social networks are not allowed to ask for a photo of a citizen's identity card to verify an account. This is one of the new regulations in the draft Law on Personal Data Protection.
According to the proposal to develop a Law on Personal Data Protection, many organizations and businesses currently collect excessive personal data compared to their industries, products, and business services, lacking a legal basis when collecting personal data as prescribed by law.
These organizations and businesses also cannot identify the data processing flow, see how personal data is used, for what purpose, to whom it is transferred, and what the impact is?
In Vietnam, the collection and processing of personal data without the consent of the data subject is still common. The data subject does not even know why these companies have their data.
The Information Security Department once warned that in the past, data trading was often done in closed groups on social networks.
Buyers must be referred by group members to be eligible to participate and usually buy in bulk.
However, new forms of data trading have emerged, using chatbots, conducted through channels and accounts on Telegram. Some subjects even sell individual personal data.
This reality shows that data trading has become very popular, public and has many new risks.
At the workshop "Data security in cyberspace", the Director of the Department of Cyber Security and High-tech Crime Prevention (A05, Ministry of Public Security) once commented: " The buying and selling of personal data does not only take place individually, between individuals, but also involves the participation of companies, organizations, and businesses ".
Some companies also set up illegal data collection systems for business purposes, developing hidden software on websites to automatically collect and analyze personal information.
In addition, cybercriminals also spread malware and attack systems to steal personal data.
In that context, the Law on Personal Data Protection is being developed to ensure and protect citizens' fundamental rights to personal data.
One of the issues of concern in the draft Law on Personal Data Protection is the regulations related to the collection of personal documents of social network users.
According to the draft new regulations, personal data registered for social network accounts and media services provided directly to viewers via cyberspace (OTT) is not public data and cannot be processed without the consent of the data subject.
Therefore, organizations and individuals providing social networking services and OTT services are responsible for protecting citizens' personal data when operating in the Vietnamese market or appearing on mobile application stores provided to the Vietnamese market.
Social networks and OTT services must clearly notify the content of personal data collected when data subjects install and use the service. Do not collect personal data illegally and outside the scope of the agreement with the customer.
The draft Law on Personal Data Protection clearly states that social networks are not allowed to require taking photos of citizen identification cards or identity cards as a factor in account authentication.
Social networks must provide users with the option to opt out of the collection and sharing of cookies, opt out of “do not track” or only have their activity tracked with their consent.
Notably, the new regulation in the draft Law on Personal Data Protection clearly states that the act of eavesdropping, wiretapping or recording calls and reading text messages without the consent of the data subject is a violation of the law.
Source: https://vietnamnet.vn/mang-xa-hoi-khong-duoc-yeu-cau-xac-thuc-bang-can-cuoc-cong-dan-2378371.html
Comment (0)