Skip to content
Insight

Protecting personal data when linking with VNeID: what businesses need to do

Decree 320/2026 extends VNeID linking and authentication across 12 sectors. Using VNeID does not mean unlimited use of citizens’ data.

Law 91/2025/QH15 on Personal Data Protection took effect on 1 January 2026. Decree 320/2026/ND-CP, effective 28 September 2026, extends requirements to connect and authenticate electronic identity through VNeID, and Decree 330/2026/ND-CP, effective 19 August 2026, sets penalties for cybersecurity and personal data violations.

Transaction accounts in 12 sectors must be linked and authenticated with VNeID, and 206 documents are being integrated on VNeID — businesses may not ask people to present them again.

Businesses should collect only what each process needs; enforce access control, strong authentication and access logging; apply encryption, key management and anomaly monitoring; define responsibilities; keep evidence of who accessed what and when; and manage data through to deletion.

SAVIS supports this with its VNeID Integration service, Consent Management, SAM Appliance, FIDO2 Passwordless Identity and 3D Secure 2.0.

Media contact: dichvuso@savis.vn

Keep reading

Insight

eIDAS 2.0 explained: what trust service providers and wallets must change

The European Digital Identity framework extends trust services and introduces digital identity wallets. Here is what changes for providers.

Read more →
Insight

Harvest now, decrypt later: why post-quantum planning starts today

Data with a long life is already at risk. A practical path to post-quantum cryptography starts with knowing where your cryptography is.

Read more →
Customer story

VPBank achieves PCI DSS certification with SAVIS and ControlCase

SAVIS supported VPBank from gap assessment to certification, working with ControlCase as the qualified security assessor.

Read more →