In a significant shift for personal data protection in Vietnam, social media service providers will no longer be required to use images or videos containing citizen identification cards (CCCD) as account verification factors, according to the draft Law on Personal Data Protection (DLCN) presented by Deputy Prime Minister Le Thanh Long to the National Assembly on May 7, 2025. This regulatory change aims to enhance user privacy and security while promoting the lawful use of personal data.
The draft law mandates that social media providers must clearly inform users about the personal data they collect when users install and utilize their platforms. It also emphasizes the importance of not collecting personal data unlawfully or outside the agreed scope with customers. Moreover, social networks are required to provide specific written notices regarding the sharing of personal data and implement security measures during advertising and marketing activities based on customer data.
Deputy Prime Minister Long explained that the creation of the Law on Personal Data Protection is intended to complete the legal framework surrounding personal data protection, thereby fostering a safer environment for data usage in Vietnam. The move comes amid rising concerns over data breaches, with a recent report from Viettel Cyber Security revealing that personal and business account leaks surged in 2024, affecting 14.5 million accounts, which represents 12% of global cases. Notably, Facebook had over 4.8 million accounts leaked, while Twitter (now X) faced more than 958,000 leaks, highlighting the urgent need for stronger data protection measures.
In light of these developments, many users have expressed support for the new regulation, particularly regarding the prohibition of requiring CCCD for account verification. Nguyen Thi Kim Hoa, an office worker in Ho Chi Minh City, shared her thoughts: "This regulation is essential for protecting citizens. A simple mistake can lead to personal information being exposed, which is very dangerous. However, without CCCD verification, how will platforms manage fake accounts, especially with the rampant spread of misinformation?"
Similarly, Tran Van Hau, a resident of Binh Thanh District, voiced concerns about users being pressured to provide sensitive information for fear of account suspension, questioning how their data would be stored and processed. "Not requiring CCCD is a good way to reduce the risk of data leaks, but there needs to be an effective alternative solution to control fake accounts," Hau emphasized.
As many social media platforms, including Facebook and Zalo, have been demanding CCCD for account verification to combat fake accounts and ensure regulatory compliance, experts believe that the new rule will significantly enhance personal data protection and user privacy. Le Hong Duc, founder of OneAds Digital, suggested leveraging the mobile subscriber identification system as an efficient verification tool and establishing a coordination mechanism among network operators, platforms, and regulatory agencies to detect and prevent violations.
Furthermore, lawyer Truong Van Tuan, head of the Sai Gon Law Office, noted that the requirement for social media accounts to be verified using mobile phone numbers—rather than CCCD—will strengthen privacy since users will not have to disclose sensitive information that could be misused. He pointed out that under Decree 147/2024/ND-CP, users are only required to verify their social media accounts with their official mobile phone numbers in Vietnam, except in cases where they do not possess a phone number in the country or are using the livestream feature for commercial purposes.
Despite the positive reception of the proposed changes, concerns remain regarding the absence of specific regulations governing the sale of personal data, particularly in transactions involving multiple parties. The lack of clear legal frameworks could complicate the prosecution of data-related crimes.
Meanwhile, as the digital landscape continues to evolve, the need for robust data protection measures is more critical than ever. The 2024 report from the National Cyber Security Association estimated that online fraud caused damages amounting to 18,900 billion VND, underscoring the financial stakes involved in safeguarding personal data.
In addition to these legislative changes, users are encouraged to remain vigilant regarding their personal information, particularly when sharing data online. As social media platforms continue to navigate the balance between user verification and privacy, the ongoing dialogue surrounding data protection in Vietnam is likely to shape the future of digital interactions.
As Vietnam moves forward with the draft Law on Personal Data Protection, the implications for users and service providers alike will be profound. The government’s commitment to enhancing data privacy is a step towards building trust in digital services and promoting a safer online environment.