On 4 July 2023, the Ministry of Public Security enacted Decision No. 4660/QD-BCA-A05, which pertains to the notification of violations of personal data protection regulations (Form No. 03). The aforementioned notification must be submitted to the Cyber Security and High-Tech Crime Prevention Department, which is under the authority of the Ministry of Public Security. The document delineates the procedures for organisations and individuals to report infringements of personal data protection regulations, including the utilisation of the National Portal for Personal Data Protection. The document stipulates that reports must be submitted within 72 hours of the discovery of a breach and provides a reference to the Decree on Protection of Personal Data (No. 13/2023) for the types of personal data, including basic and sensitive data, and the responsibilities of data controllers and processors. The legal basis for this document is Article 23 of Decree 13/2023.
Original source