On 10/12, the National Assembly approved the Cybersecurity Law. The law designates the Ministry of Public Security as the focal agency assisting the government in state management of cybersecurity. Its responsibilities include developing and proposing strategies, policies, plans, and measures for cybersecurity protection, as well as researching, developing, and utilizing security ciphers to safeguard data security within its purview.

The Ministry of Public Security holds the authority to mandate that businesses offering services on telecommunications networks, the internet, and value-added services in cyberspace, along with information system owners, remove content violating cybersecurity laws from their managed systems. This agency also ensures information security in cyberspace, data security; establishes a mechanism for IP address identification management; authenticates digital account registration information; and provides warnings and shares information regarding cybersecurity threats.

The law tasks the Ministry of Public Security with preventing and combating activities that use cyberspace to infringe upon national sovereignty, interests, security, social order, and safety, as well as preventing cybercrime. Network service providers must implement technical measures to secure data processing activities, including personal data. They are also responsible for identifying the IP addresses of organizations and individuals using internet services and providing this information to specialized forces upon request.

Businesses in related sectors must coordinate with specialized cybersecurity forces under the Ministry of Public Security to establish connection systems, data transmission, and technical solutions for investigating, verifying, and addressing legal violations.

An IP address is a unique numerical sequence in cyberspace, akin to a physical address. It enables electronic devices to identify, communicate, and exchange data. Information derived from an IP address assists authorities in determining the location, time, and connected subscriber, similar to the residential information associated with a fixed address.

Minister of Public Security Luong Tam Quang presented the explanatory report on 10/12. Photo: Hoang Phong

The law also prohibits a range of acts, including posting and spreading information that propagates against the State, incites division and hatred among ethnic groups and religions. It forbids insulting ethnic groups, leaders, prominent figures, or national heroes; distorting history; fabricating, slandering, or infringing upon the dignity, honor, and reputation of others; and disseminating false information that causes public confusion.

Other prohibited acts involve using artificial intelligence for impersonation, unauthorized intrusion into telecommunications networks, and illegal collection and use of personal data.

In a previous explanatory report, Minister of Public Security Luong Tam Quang stated that the essence of ensuring cybersecurity is to combat and prevent cybercrime in cyberspace. He added that the sharing of information, collection of evidence, and electronic data among nations are crucial.

As the focal agency, the Ministry of Public Security is responsible for leading the development of national technical standards and guidelines for cybersecurity protection for critical national security information systems, excluding military information systems.

The Cybersecurity Law will take effect from 1/7/2026.

Son Ha