Requirements for providing electronic authentication services in Vietnam (latest)

Requirements for providing electronic authentication services in Vietnam (latest) (Image from Internet)

1. Requirements for providing electronic authentication services in Vietnam (latest)

Conditions for providing electronic authentication services under Article 23 of Decree 69/2024/ND-CP of Vietnam's Government are as follows:

- Conditions regarding organizations and enterprises

Public non-business units, enterprises in the People's Public Security.

- Conditions regarding personnel

+ The head of the organization, the legal representative of the enterprise, must be a Vietnamese citizen and reside in Vietnam;

+ The organization or enterprise must have personnel with a university degree or higher in information security, information technology, or telecommunications who are responsible for providing the service, managing the system, operating the system, ensuring the information security of the system.

- Conditions regarding physical facilities, technical equipment, service provision management processes, and security, order assurance plans

Organizations or enterprises requesting a Certificate of Eligibility for Electronic Authentication Service Business must have an operational scheme for providing services that includes the following contents: Plan, operational process for providing electronic authentication services, including an explanation of the information technology system; technical solution plan; data storage plan, ensuring data integrity, information security of the service providing system; personal and organizational data protection plan; security and order plan; fire prevention and control plan, disaster recovery, and ensuring stable, uninterrupted operation of the electronic authentication service; technical equipment must be located in Vietnam and tested for information security according to the laws.

- The organization providing electronic authentication services may delegate certain activities to other organizations, including consulting, introducing, answering questions about electronic authentication services; seeking partners, negotiating, agreeing on contents related to operations, utility provision of authentication services; supporting, customer care for users of the service, and other marketing activities according to the laws. Delegated activities shall be carried out according to the laws.

2. Documentation and procedures for issuing a Certificate of Eligibility for providing electronic authentication services

The documentation and procedures for issuing a Certificate of Eligibility for providing electronic authentication services under Article 24 of Decree 69/2024/ND-CP are as follows:

* Components of the dossier:

- Application form for the Certificate of Eligibility for Electronic Authentication Service Business, form XT01 in the Appendix issued with Decree 69/2024/ND-CP;

- Scheme and documents proving compliance with conditions specified in Clauses 2 and 3 of Article 23 of Decree 69/2024/ND-CP.

* Procedure, resolution period:

- The organization or enterprise submits 01 set of dossier specified in Clause 1 of Article 24 of Decree 69/2024/ND-CP directly or via the postal system to the Ministry of Public Security or submits the dossier through the National Public Service Portal, the Public Service Portal of the Ministry of Public Security;

+ If the dossier is incomplete or invalid, within 03 working days from the date of receipt, the Ministry of Public Security shall notify the organization or enterprise in writing to supplement the dossier;

+ Within 03 working days from the date of receiving a valid dossier, the Ministry of Public Security shall solicit opinions from relevant ministries, ministerial-level agencies in writing;

+ Within 10 days from the date of receiving the written request from the Ministry of Public Security, the ministries, ministerial-level agencies are responsible for reviewing, assessing, and providing feedback in writing to the Ministry of Public Security;

+ Within 30 days from the date of receiving a complete valid dossier, the Ministry of Public Security shall conduct an assessment, perform an actual inspection at the organization or enterprise, and issue the Certificate of Eligibility for providing electronic authentication services, form XT03 in the Appendix issued with Decree 69/2024/ND-CP to eligible organizations or enterprises; in case of refusal, a written notice stating the reasons shall be provided.

>> CLICK HERE TO READ THIS ARTICLE IN VIETNAMESE