What are requirements for connecting to National Population Database system in Vietnam?

What are requirements for connecting to National Population Database system in Vietnam?

Pursuant to Article 6 of the Circular 46/2022/TT-BCA stipulating requirements for connecting to National Population Database system in Vietnam as follows:

1. Information systems of agencies and organizations connected to the National Population Database must satisfy requirements for ensuring information system safety at level 3 or higher, as prescribed by the law on population. ensure the security of the information system by level.

2. Before or after making the connection with the National Population Database, if the information systems of agencies and organizations make adjustments or changes in system design, they must be checked and assessed for information security and safety. The inspection and assessment are carried out using the People's Public Security Force's professional equipment and software. Examination and evaluation contents include:

a) Setting up security configurations on system devices, servers, applications, and databases;

b) Detect malicious code, vulnerabilities, and weaknesses; test system penetration for system devices, servers, and applications;

c) Information security for application source code;

d) Security and hardware safety;

dd) The promulgation of regulations and policies on account management, in and out of the server area, the management of passwords for administrative accounts, access management, written agreements on rights and obligations, and the responsibility of the subjects involved in the management, operation, and provision of services for the information system.

3. For information systems managed by the Ministry of National Defense, the agency managing the National Population Database of the Ministry of Public Security is responsible for coordinating and guiding specialized units of the Ministry of National Defense to implement the implementation, including the assessment and examination of information security and safety as prescribed in Clause 2 of this Article.

4. The Department of Cybersecurity and High-Tech Crime Prevention shall assume the prime responsibility for, and coordinate with, the Department of Professional Technology, the agency managing the National Population Database of the Ministry of Public Security, and relevant units as follows:

a) Before connecting to the National Population Database, check and assess the information security and safety of the information system and obtain a written certification of security assurance and safety information. In cases where information systems that require connection to the National Database of Population have been connected to an electronic identification and authentication platform, they are not required to check and assess the security and safety of the information as prescribed in Clause 2 of this article.

b) Unscheduled inspection and assessment of the information security and safety assurance of the information system connected to the national population database according to the contents specified in Clause 2 of this Article;

c) Periodically inspect and evaluate (once per year) the information security and safety assurance of the information system connected to the national population database according to the content specified in Clause 2. Except for information systems managed by the Ministry of National Defense, information systems with online shared data on network security and information safety monitoring to the Ministry of Public Security, and information systems inspected, evaluated, and certified by a competent authority, ensure security and safety for no more than one year in accordance with the law on assurance of information system safety by level.

What are regulations on storing connection logs, sharing and exploiting information of National Population Database system in Vietnam?

Pursuant to Article 8 of the Circular 46/2022/TT-BCA stipulating storing connection logs, sharing and exploiting information of National Population Database system in Vietnam as follows:

1. The agency managing the National Population Database The Ministry of Public Security and agencies and organizations engaged in activities of connecting, sharing, and exploiting information with the National Population Database are responsible for keeping a log of connection, sharing, and information exploitation to serve the purposes of monitoring, inspection, and supervision.

2. The minimum time limit for storing logs of connection, sharing, and exploitation of information in the National Population Database system is 2 years from the first time of connection, sharing, and exploitation of information.

What are regulations on handling and solving problems in exploiting information on the National Population Database in Vietnam?

Pursuant to Article 9 of the Circular 46/2022/TT-BCA stipulating handling and solving problems in exploiting information on the National Population Database in Vietnam as follows:

1. It is the responsibility of agencies and organizations engaged in activities such as connecting, sharing, and exploiting information in the National Population Database to create documents that guide the use and provision of information mining services based on information in the national database on the population of their agencies or units.

2. Agencies, organizations, and individuals request troubleshooting, support, and answers to problems in the process of manipulating and using functions, connecting, sharing, and exploiting information with the agency. National population database through the email address [email protected], by contact phone number, by working at the headquarters of the agency managing the National Database on Population Statistics affiliated with the Ministry of Public Security, or in writing requesting assistance and problem resolution.

Best regards!