What is the information shared for the national database system on population in Vietnam?

Main Content

• What is the information shared for the national database system on population in Vietnam?
• What are the conditions for connecting information between the national database on population and national databases, specialized databases and other information systems in Vietnam?
• What are the procedures for connecting information between the national database on population and national databases, specialized databases and other information systems in Vietnam?

What is the information shared for the national database system on population in Vietnam?

According to the provisions of Article 4 of Circular 46/2022/TT-BCA on information shared for the national database system on population as follows:

+ Shared electronic civil status database

+ Residence database

+ Citizen ID database

+ Medical database

+ Other specialized databases sharing information about citizens for the national database system on population in accordance with the provisions of law to ensure consistency, completeness, accuracy and timeliness.

+ Specialized information associated with citizens (specified in Appendix I promulgated together with the Circular) when being shared by agencies and organizations for the Ministry of Public Security, the agency managing the national database on population of the Ministry of Public Security is the focal point for exploitation, use to serve the management of the population and meet the requirements of other professional activities of police agencies under units and localities according to their assigned functions, tasks and powers.

What are the conditions for connecting information between the national database on population and national databases, specialized databases and other information systems in Vietnam?

According to the provisions of Article 6 of Circular 46/2022/TT-BCA, the conditions for connecting information between the national database on population and national databases, specialized databases and other information systems in Vietnam are as follows:

- Information systems of agencies and organizations connected to the national database on population must meet the requirements for ensuring the security of information systems at level 3 or higher in accordance with the law on ensuring information system security by levels.

- Before or after connecting to the national database on population, if the information system of agencies and organizations has adjusted or changed the system design, it must be inspected and evaluated for information security. The inspection and evaluation shall be conducted by using professional equipment and software of the People's Police force; Contents of inspection and evaluation include:

+ Setting up security configurations on system devices, servers, applications and databases;

+ Detecting malicious code, vulnerabilities, weaknesses, testing system intrusion for system devices, servers and applications;

+ Ensuring information security for application source code;

+ Ensuring hardware security and safety;

+ Promulgating regulations and policies on account management, the entry and exit to the server area, password management of administrative accounts, access management, and written agreements on rights, obligations and responsibilities of entities involved in managing, operating and providing services for information systems.

- For information systems managed by the Ministry of National Defense, the agency managing the national database on population of the Ministry of Public Security shall coordinate and guide specialized units of the Ministry of Defense to evaluate and inspect information security as prescribed in Clause 2 of this Article.

- The Department of Cyber​​Security and Hi-tech Crime Prevention shall take charge for, and coordinate with the Department of Professional Technology, the agency managing the national database on population of the Ministry of Public Security and relevant units in:

+ Inspecting and evaluating information security of information systems requiring to connect with the national database on population before connecting and certifying the assurance of information security; In case information systems requiring connection to the national database on population have been connected to electronic identification and authentication platforms, they are not eligible for inspecting and evaluating information security as prescribed in Clause 2 of this Article.

+ Suddenly inspecting and evaluating the assurance of information security of the information systems connected to the national database on population according to the contents specified in Clause 2 of this Article;

+ Periodically inspecting and evaluating (01 time in 01 year) to ensure information security of the information systems connected to the national database on population according to the contents specified in Clause 2 of this Article; except for information systems managed by the Ministry of Defense; information systems that have been shared online with data on network security supervision and information security for the Ministry of Public Security or information systems that have been inspected, evaluated and certified by competent agencies to ensure security and safety for no more than 01 year in accordance with the law on ensuring information system security by levels.

What are the procedures for connecting information between the national database on population and national databases, specialized databases and other information systems in Vietnam?

According to the provisions of Article 7 of Circular 46/2022/TT-BCA as follows:

Step 1:

- Agencies and organizations managing information systems shall make a written request to connect to the national database on population and send it to the agency managing the national database on population of the Ministry of Public Security.

- In particular, the written request for connection includes the following contents:

+ Registrar;

+ Assigned functions, tasks and powers;

+ Name of information system, database proposed to be connected and shared;

+ Information of official in charge of connecting, sharing and declaring information;

+ Purposes, scope, contents of information, number of information fields to be shared;

+ Services registered to use in the national database on population, documents describing technical system components connected to the national database on population.

Step 2:

- Immediately after receiving the written request, the agency managing the national database on population of the Ministry of Public Security shall:

+ Provide technical documents for connecting, sharing and exploiting information in the national database on population to agencies and organizations that request connection;

+ Support agencies and organizations to connect, adjust software and technically test information sharing and exploitation services in the national database on population;

+ Coordinate with the Department of Cyber​​Security and Hi-tech Crime Prevention, the Department of Professional Technology under the Ministry of Public Security and relevant units to inspect and evaluate the security of information systems of agencies and organizations that request connection.

Circular 46/2022/TT-BCA will take effect from December 19, 2022.