A survey found that 59 out of 63 electronic information portals and 60 out of 63 online public service portals have not published Privacy Policy, a form of electronic agreement that establishes the responsibilities of state agencies to data owners - citizens. This is the basis for people to protect their rights for data in case of incidents or disputes.

The survey also found that most localities do not fully implement legal provisions on personal data protection. Only 17/50 interactive apps between the government and people show information about contacts for personal data protection. Only one of 63 online public service portals and three of 63 electronic information portals at provincial level publicize this information.

When surveyors tried to request updated account information and access personal data protection methods developed by local authorities (contacts are shown in online public service portals and electronic information portals), they received nine replies for 130 emails sent.

One of the most worrying issues that the survey has found is the misinterpretation and misclassification of the legal responsibilities of data management subjects.

The legal responsibility for personal data is confused between “governing body” (province and city People’s Committee), the “operating agency/unit” (the Department of Information & Communications) and businesses providing platform building services.

According to Nguyen Quang Dong, head of IPS, there is no organization in Vietnam that conducts official research to give statistics about the losses caused by data leakage. 

According to IBM Security, data breaches in the public sector increase the total operation cost by 10 percent per annum.

The research team recommends that authorities regularly evaluate the enforcement of people's rights for personal data on interactive platforms with local governments.

The research team also recommended supplementing the criteria for personal data protection assessment into the digital transformation indexes at ministerial, provincial and national levels.

Speaking at the seminar, Patrick Haverman, Deputy Chief Resident Representative of UNDP Vietnam, praised efforts of the Vietnamese Government and localities in providing online public services.

However, he stressed that citizens’ personal data protection in the public sector is one of key factors to build people’s trust in online public services.

Nguyen Lam Thanh, Vice President of Vietnam Digital Communication Association, said that personal data protection will help consolidate people’s confidence and motivate them toward digital transformation. 

Trong Dat