The Law on Data has five chapters with 46 articles, regulating digital data; building development, protection, administration, processing, and use of digital data; national data centres; national comprehensive databases; digital data products and services; digital data management; rights, obligations, and responsibilities of agencies, organisations, and individuals related to digital data activities.

The National Assembly adopted the Law on Data on November 30. Photo: VGP

Chairman of the National Assembly's Committee on National Defence and Security Le Tan Toi said that data in the national database was a shared resource for agencies, organisations and individuals to exploit and use.

One of the important highlights in the law is that it regulates the transfer and processing of cross-border data. Agencies, organisations and individuals are free to transfer data from abroad to Vietnam, process foreign data in Vietnam, and have their legitimate rights and interests protected by the State in accordance with the provisions of law.

Transfer of core and important data includes transferring data stored in Vietnam to data storage systems located outside of Vietnam.

For critical or core data transfers, such as transferring locally stored data to foreign servers, the process must ensure compliance with national security, public interests, and the legal rights of data owners under Vietnamese law and international agreements.

The law is also expected to establish a national data exchange platform to support innovation, entrepreneurship, and digital transformation. The platform will also facilitate the trading and sharing of data to support economic and social development.

Regarding the development of the national data centre and infrastructure, Article 30 stipulates the infrastructure of the national data centre. Article 31 stipulates the responsibilities of the national data centre, including provisions to protect, ensure security, safety, and confidentiality, control, detect, and prevent attacks, intrusions, sabotage, and risks of information security and safety at the national data centre. Article 32 stipulates ensuring resources for the development of the national data centre and the infrastructure of the centre.

The Law on Data will take effect from July 1, 2025.