Vietnam’s National Assembly has continued its review of important legal changes covering data security, electronic identity and administrative penalties. Lawmakers discussed the draft measures on November 4 as part of the second session of the 16th National Assembly.
The proposed Data Security Law is designed to create a clearer system for protecting information. It would divide data into five levels of security risk, with different protection requirements for each level.
Under the draft, organisations responsible for handling data would need to assess risks and apply suitable security measures. These rules would cover the full life of digital information, from the design of a system to the point when data is destroyed.
The proposal also addresses the use of data in artificial intelligence. It requires organisations to protect the origin and integrity of training data and information created through AI systems. It would also prohibit data poisoning and unauthorised extraction.
Another part of the draft focuses on the transfer of data across national borders. Lower-risk data categories would have fewer requirements, while transfers involving higher-risk information could require formal assessment and approval.
The National Assembly also discussed a draft law on electronic identification and authentication. This proposal aims to create a clearer legal framework for digital identity services and the responsibilities of organisations and individuals using them.
Digital identification has become increasingly important as governments and businesses move more services online. Clear rules can help people prove their identity, access public services and complete transactions while reducing the risk of fraud.
A third proposal concerns amendments to the Law on Handling of Administrative Violations. The draft would increase the time allowed for penalties in some sectors and raise the maximum fines for certain offences.
Under the proposal, the limitation period for penalties could rise to two or three years in selected areas. The maximum fine could reach 1.5 billion Vietnamese dong for individuals and 3 billion dong for organisations.
The draft also includes changes to aggravating and mitigating circumstances, exemptions from responsibility and the use of digital systems in administrative procedures.
Lawmakers have called for careful review of the proposed changes. The National Assembly’s legal and judicial committee warned that longer limitation periods must be clearly defined. It also said the rules should maintain a proper distinction between administrative violations and criminal offences.
The government says the legal changes are intended to improve public safety, support digital transformation and make enforcement more effective. The proposals will continue through the legislative process before any final rules are adopted.

