When shall the content of the certificate confirming eligibility for conducting electronic authentication services in Vietnam be changed?

When shall the content of the certificate confirming eligibility for conducting electronic authentication services in Vietnam be changed?

Based on Clause 1 Article 25 of Decree 69/2024/ND-CP, the reissuance and modification of the certificate confirming eligibility for conducting electronic authentication services are stipulated as follows:

Modification of the certificate confirming eligibility for conducting electronic authentication services:

1. The content of the certificate confirming eligibility for conducting electronic authentication services can be modified if the organization or enterprise changes any of the following information regarding the legal representative, registered address, trading name, plan, or procedures, as assessed by the Ministry of Public Security in accordance with Clause 3, Article 23 of this Decree.

2. The organization or enterprise must submit a set of documents requesting the modification of the certificate confirming eligibility for conducting electronic authentication services to the Ministry of Public Security, according to the regulations stated in point a, Clause 2, Article 24 of this Decree. The application file for adjustment or modification of the certificate includes:

a) The application form for issuance, replacement, or modification of the certificate confirming eligibility for conducting electronic authentication services, according to the XT02 template attached to this Decree.

b) Valid legal documents or materials proving the changes in information as specified in Clause 1 of this Article.

3. In case the organization or enterprise changes any of the information regarding the legal representative, registered address, or trading name, within 10 days from the date of receiving a complete and valid application file, the Ministry of Public Security is responsible for evaluating and issuing the modified certificate confirming eligibility for conducting electronic authentication services to the organization or enterprise that meets the requirements. In case of refusal to make the changes, the Ministry of Public Security must inform the organization or enterprise in writing, stating the reasons for the refusal.

...

Therefore, the content of the certificate confirming eligibility for conducting electronic authentication services can be modified if the organization or enterprise changes any of the information regarding the legal representative, registered address, trading name, plan, or procedures, as assessed by the Ministry of Public Security in accordance with Clause 3, Article 23 of Decree 69/2024/ND-CP.

When shall the content of the certificate confirming eligibility for conducting electronic authentication services in Vietnam be changed? - image from internet

What documents are required for the application for a certificate confirming eligibility for conducting electronic authentication services in Vietnam?

Based on Article 24 of Decree 69/2024/ND-CP, the documentation and procedures for issuing the certificate confirming eligibility for conducting electronic authentication services are stipulated as follows:

Documentation and procedures for issuing the certificate confirming eligibility for conducting electronic authentication services:

1. Required documents:

a) The application form for the issuance of the certificate confirming eligibility for conducting electronic authentication services, according to the XT01 template attached to this Decree.

b) The project plan and the necessary documents and materials proving compliance with the conditions specified in Clause 2 and Clause 3 of Article 23 of this Decree.

...

As regulated above, the application file for the issuance of the certificate confirming eligibility for conducting electronic authentication services includes the following documents:

[1] The application form for the issuance of the certificate confirming eligibility for conducting electronic authentication services.

[2] The project plan and the necessary documents and materials proving compliance with the following conditions:

- Personnel requirements:

+ The head of the organization, the legal representative of the enterprise must be Vietnamese citizens, residing in Vietnam.

+ The organization or enterprise must have personnel with at least a university degree in information security, information technology, or telecommunications responsible for providing services, system administration, system operation, and ensuring the security of the system's information.

- Requirements for infrastructure, technical equipment, service management procedures, and security and order assurance: The organization or enterprise applying for the issuance of the certificate confirming eligibility for conducting electronic authentication services must have an operational plan, which includes the following contents:

+ Plan and procedure for providing electronic authentication services, including a description of the information technology system.

+ Technical solution plan.

+ Plan for data storage, ensuring data integrity and security for the service system.

+ Plan for the protection of personal and organizational data.

+ Plan for security and order assurance.

+ Fire prevention and firefighting plan, disaster prevention plan, and ensuring stable and uninterrupted operation of electronic authentication services.

+ Technical equipment must be located in Vietnam and undergo security and information safety inspections as required by law.

What are cases of revocation of the certificate confirming eligibility for conducting electronic authentication services in Vietnam? 

Based on Article 26 of Decree 69/2024/ND-CP, the revocation of the certificate confirming eligibility for conducting electronic authentication services is stipulated as follows:

Revocation of the certificate confirming eligibility for conducting electronic authentication services

1. The organization providing electronic authentication services shall have the certificate confirming eligibility for conducting electronic authentication services revoked in the following cases:

a) The organization does not operate continuously for a period of 6 months or more.

b) The organization is dissolved or declared bankrupt according to the provisions of the law.

c) The organization fails to rectify violations regarding the protection of personal data, information security, and cybersecurity as required by the competent state authority.

2. The Ministry of Public Security shall issue a decision on the revocation of the certificate confirming eligibility for conducting electronic authentication services according to the XT04 template attached to this Decree.

3. The organization providing electronic authentication services whose certificate confirming eligibility for conducting electronic authentication services is revoked shall be responsible for ensuring the lawful rights and interests of the electronic identity subject and related parties according to the provisions of the law.

As regulated above, the certificate confirming eligibility for conducting electronic authentication services shall be revoked in the following cases:

- The organization does not operate continuously for a period of 6 months or more.

- The organization is dissolved or declared bankrupt according to the provisions of the law.

- The organization fails to rectify violations regarding the protection of personal data, information security, and cybersecurity as required by the competent state authority.