On 4 July 2023, the Ministry of Public Security enacted the notification procedure for the submission of Personal Data Processing Impact Assessment Profiles (Decision No. 4660/QD-BCA-A05). This decision requires organisations and individuals to adhere to a specified procedure for the assessment of the impact of personal data processing. The process entails accessing the National Portal for the Protection of Personal Data, providing the required information in accordance with the Ministry of Public Security's guidelines, and submitting the assessment file via the portal or directly to the Department of Cybersecurity and Hi-tech Crime Prevention. The legal basis for this procedure is Article 24 of the Law on the Protection of Personal Data (Decree 13/2023).
Original source