On 1 September 2024, the Ministry of Public Security closed its consultation on the Data draft Law (No. 2025/QH15) including operational conditions and licensing requirements for data products and services. The draft law specifies that organisations providing data intermediary products and services, as well as those involved in data analysis, synthesis, and electronic authentication services, must follow a registration and licensing process. This includes adhering to specific legal and technical standards to ensure security, transparency, and lawful data usage. The Ministry of Public Security is responsible for assessing these organisations and issuing certificates verifying their eligibility to conduct business. Data exchange platforms must also be licensed by national data regulatory authorities. Detailed operational regulations must be publicly disclosed, covering responsibilities, confidentiality, and compliance with legal standards. In all cases, compliance with national laws and specific conditions outlined in the law is mandatory for licensing and registration.
Original source