DECREE

REGULATIONS ON ELECTRONIC IDENTIFICATION AND AUTHENTICATION

Pursuant to the June 19, 6 Law on Government Organization; The Law amending and supplementing a number of articles of the Law on Government Organization and the Law on Organization of Local Government dated November 2015, 22;

Pursuant to the November 19, 11 Law on Cyberinformation Security;

Pursuant to the June 12, 6 Law on Cybersecurity;

Pursuant to the November 22, 6 Law on Electronic Transactions;

Pursuant to the Law on Identification dated November 27, 11;

Pursuant to the Investment Law dated June 17, 6, as amended and supplemented by a number of articles under Law No. 2020/72/QH2020, Law No. 14/03/QH2022, Law No. 15/05/QH2022, Law No. 15/08/QH2022, Law No. 15/09/QH2022, Law No. 15/20/QH2023; Law No. 15/26/QH2023;

At the request of the Minister of Public Security;

The Government issued a Decree regulating electronic identification and authentication.

Chapter I

GENERAL RULES

Article 1. Scope

This Decree provides details on electronic identity; issuance, management and use of electronic identification accounts; updating and storing information in the electronic identification and authentication system; conditions and procedures for connecting to the electronic identification and authentication system; electronic authentication services; procedures for issuing, locking and unlocking electronic identification cards and responsibilities of relevant agencies, organizations and individuals regarding electronic identification, authentication and electronic identification cards.

Article 2. Subject of application

This Decree applies to Vietnamese agencies, organizations and citizens; foreign organizations and individuals residing and operating in Vietnam that directly participate in or are related to electronic identification, authentication and electronic identification activities.

Article 3. Explain words

In this Decree, the terms below are construed as follows:

1. Electronic identity is information about an agency, organization or individual in the electronic identification and authentication system that allows unique identification of that individual, agency or organization in the electronic environment.

2. The subject of electronic identity is an agency, organization or individual identified with an electronic identity.

3. Electronic identification is the activity of registering, verifying, creating and attaching electronic identity to the subject of electronic identity.

4. The agency in charge of electronic identification and authentication is the Department of Administrative Police for Social Order - Ministry of Public Security.

5. An electronic identification account is a collection of login names, passwords or other means of authentication created by the electronic identification and authentication management agency, used to access and use the features, utilities and applications of the electronic identification and authentication system and the information system that has been connected and shared in accordance with the provisions of law.

6. Electronic authentication is the activity of authenticating, confirming, affirming, certifying, providing electronic identity, electronic identification account or other information in the National Population Database, Identity Database, National Immigration Database through the Electronic Identification and Authentication System, electronic identification and authentication platform.

7. Authentication factor is an authentication means used to confirm and accurately affirm the electronic identity subject before accessing and exploiting information in the electronic identification and authentication system.

8. Authentication means are some methods that allow users to use to perform electronic authentication: password, secret code, barcode, terminal, one-time password device or software, cryptographic device or software, identity card, citizen identification card, passport, facial photo, fingerprint, voice, iris or other tools and methods used for the purpose of electronic authentication.

9. An organization providing electronic authentication services is a public service unit or enterprise in the People's Public Security that meets the conditions for doing business and providing electronic authentication services as prescribed in this Decree.

10. The electronic identification information page is a utility created by the Ministry of Public Security, developed from the electronic identification and authentication system to perform electronic identification and authentication activities in handling administrative procedures, public administrative services and other transactions in the electronic environment; developing features, utilities and applications to serve agencies, organizations and individuals.

11. Electronic identification and authentication platform is an information system serving the exchange of information between the electronic identification and authentication system and the information systems of state agencies, political organizations, socio-political organizations, electronic authentication service providers and other organizations and individuals.

Article 4. Principles of electronic identification and authentication

1. Comply with the Constitution and laws, ensure the legitimate rights and interests of agencies, organizations and individuals.

2. Ensure accuracy, publicity, transparency in management, convenience for agencies, organizations and individuals.

3. Ensure security, safety of equipment, and data security when performing electronic identification and authentication.

4. Agencies, organizations and individuals that exploit and use electronic identities must keep electronic identity account information confidential and comply with legal regulations on personal data protection.

5. Any violations of the law on electronic identification and authentication must be detected and handled promptly in accordance with the provisions of law.

6. Ensure compliance with international treaties of which Vietnam is a member.

7. Do not use electronic identification accounts for activities or transactions that are contrary to the provisions of law; infringe upon security, national defense, national interests, public interests, and the legitimate rights and interests of organizations and individuals.

8. Any agency, organization or individual is not allowed to illegally interfere with the operation of the electronic identification and authentication system.

Chapter II

E-IDENTITY, E-IDENTIFICATION, E-IDENTIFICATION ACCOUNT, E-AUTHENTICATION

Article 5. Electronic identity of foreigners

1. Foreign electronic identity includes:

a) Identification number of the foreigner;

b) Full name, middle name and first name;

c) Date of birth;

d) Gender;

d) Nationality;

e) Number, symbol, date, month, year and place of issue of passport or international travel document;

g) Face photo;

h) Fingerprint.

2. The foreigner's identification number is a unique natural number sequence established by the electronic identification and authentication system to manage the electronic identity of a foreign individual.

Article 6. Electronic identity of agencies and organizations

1. Electronic identity information of agencies and organizations includes:

a) Identification number of the agency or organization;

b) Name of agency or organization including Vietnamese name, abbreviated name (if any) and foreign language name (if any);

c) Date of establishment;

d) Head office address;

d) Tax code (if any);

e) Enterprise code (if any);

g) Electronic identification code of the agency or organization (if any);

h) Surname, middle name and first name, personal identification number (or foreigner identification number) of the legal representative or head of the agency or organization performing the procedure for granting an electronic identification account to the agency or organization.

2. The identification number of an agency or organization is a unique natural number sequence established by the electronic identification and authentication system to manage the electronic identity of an agency or organization.

Article 7. Classification and subjects granted electronic identification accounts

Vietnamese agencies, organizations, citizens and foreign organizations and individuals residing in Vietnam are granted electronic identification accounts as follows:

1. For Vietnamese citizens aged 14 years or older who have been issued a citizen identification card or a valid identification card, a level 01 electronic identification account or a level 02 electronic identification account will be issued.

Vietnamese citizens from 6 years old to under 14 years old who have been issued an identification card will be granted a level 01 electronic identification account and a level 02 electronic identification account when needed. Vietnamese citizens under 6 years old who have been issued an identification card will be issued a level 01 identification account when needed.

2. Foreigners aged 06 years and over who have been granted a permanent residence card or temporary residence card in Vietnam will be granted a level 01 electronic identification account or a level 02 electronic identification account when needed. Foreigners under 06 years of age who have been granted a permanent residence card or temporary residence card in Vietnam will be granted a level 01 electronic identification account when needed.

3. For agencies and organizations established or registered to operate in Vietnam, electronic identification accounts are granted regardless of level.

Article 8. Updating information into the electronic identification and authentication system

1. Any changes in personal information in the National Population Database, Electronic Civil Status Database, Identity Database, National Immigration Database, other national databases, specialized databases related to electronic identity, and information integrated into the electronic identification account will be automatically updated to the electronic identification and authentication system.

2. Information of agencies and organizations in the National Database on Business Registration, national databases, and other specialized databases related to electronic identity is automatically updated into the electronic identification and authentication system to create identification numbers and electronic identification accounts of agencies and organizations serving electronic identification and authentication activities.

Article 9. Use of electronic identification accounts and other electronic transaction accounts created by agencies, organizations and individuals

1. Level 01 electronic identification accounts of Vietnamese citizens and foreigners are used to access, exploit, and use information about electronic identity and some features, utilities, and applications of the electronic identification and authentication system, and the information system that has been connected and shared according to the provisions of law.

2. Level 02 electronic identification accounts of Vietnamese citizens are used to access, exploit, and use electronic identification, information other than the information integrated into the electronic identification shared, integrated, and updated from the national database, specialized database, and all features, utilities, and applications of the electronic identification and authentication system, and the information system that has been connected and shared in accordance with the provisions of law.

3. Level 02 electronic identification accounts of foreigners, electronic identification accounts of agencies and organizations are used to access, exploit and use electronic identity information and other information shared, integrated and updated from national databases, specialized databases and all features, utilities and applications of the electronic identification and authentication system, and information systems that have been connected and shared in accordance with the provisions of law.

4. The electronic identity subject uses the electronic identity account to log in, authenticate and use features and utilities on the National Identification Application, the electronic identification information page with the address dinhdanhdientu.gov.vn or vneid.gov.vn or other utilities on applications and software of other agencies, organizations and individuals that have been connected to the electronic identification and authentication system.

5. Electronic identification accounts are used to perform administrative procedures, public administrative services in the electronic environment and other activities according to the needs of the electronic identity subject.

6. Information about electronic identity and information integrated on electronic identification cards and electronic identification accounts have evidentiary value, equivalent to providing information or using and presenting papers and documents containing that information in performing administrative procedures, public services, transactions and other activities.

7. Agencies, organizations and individuals are allowed to create electronic transaction accounts in accordance with the provisions of the law on electronic transactions to serve their transactions and activities and are responsible for authenticating and ensuring the accuracy of the accounts they create, deciding on the level and value of use of each level of account. Information to create an electronic transaction account must be provided by the account owner and agreed to by the agency, organization or individual to use to create the account.

Article 10. Procedures for granting electronic identification accounts to Vietnamese citizens

1. Level 01 electronic identification account issuance

a) Citizens using digital devices download and install the National Identification Application;

b) Citizens use the National Identification Application to enter information about their personal identification number, registered mobile phone number, and citizen's email address (if any); ｄｅｃｌａｒｅ information according to the instructions on the National Identification Application; collect facial photos via digital devices and send a request for an electronic identification account to the electronic identification and authentication management agency;

c) The electronic identification and authentication management agency shall check and authenticate the information of citizens requesting an electronic identification account and notify the account registration results via the National Identification Application or via the owner's mobile phone number or email address;

d) Representatives and guardians use their own mobile phone number and level 02 electronic identification account to ｄｅｃｌａｒｅ and register for level 01 electronic identification account for people under 14 years old, wards, and represented persons through the National Identification Application.

2. Level 02 electronic identification account issuance

a) Citizens go to the police station of the commune, ward or town or the identity management agency regardless of their place of residence, present their citizen identity card, a valid identity card and carry out the procedure for issuing a level 02 electronic identification account;

b) Citizens provide complete and accurate information on the Application for electronic identification account according to form TK01 issued with this Decree; clearly providing the owner's mobile phone number, citizen's email address (if any) and other information requested to be integrated into the electronic identification (if required) to the receiving officer;

c) The receiving officer enters the citizen's information into the electronic identification and authentication system for verification; verifies the citizen's face photo and fingerprints with the Identity Database;

d) The electronic identification and authentication management agency shall check and authenticate the information of citizens requesting a level 02 electronic identification account and notify the results of the registration for a level 02 electronic identification account via the National Identification Application or the owner's mobile phone number or email address;

d) Persons under 14 years of age, persons under guardianship, persons under representation, together with their representatives or guardians, go to the police station of the commune, ward, town or the place where the procedures for issuing an ID card are carried out to carry out the procedures for issuing a level 02 electronic identification account;

The representative and guardian use their own mobile subscription number to ｄｅｃｌａｒｅ and register for level 02 electronic identification accounts for Vietnamese citizens under 14 years old, wards, represented person.

3. In case a citizen has not been issued a citizen identification card or identification card, the request for an electronic identification account must be made at the same time as the procedure for issuing an identification card and must follow the procedures specified in Clause 1 and Clause 2 of this Article.

Article 11. Procedures for granting electronic identification accounts to foreigners

1. Level 01 electronic identification account issuance

a) Foreigners using digital devices download and install the National Identification Application;

b) Foreigners use the National Identification Application to enter information about their passport number or international travel document number and email address or mobile phone number that has registered subscriber information (if any); ｄｅｃｌａｒｅ information according to the instructions on the National Identification Application; collect facial photos using digital devices and send a request for an electronic identification account to the electronic identification and authentication management agency via the National Identification Application;

c) The electronic identification and authentication management agency notifies the account registration results via the National Identification Application or the owner's mobile phone number or email address;

d) Representatives and guardians use their own mobile phone number and level 02 electronic identification account to ｄｅｃｌａｒｅ and register for level 01 electronic identification account for foreigners under 14 years old, wards, and representatives through the national identification application.”

2. Level 02 electronic identification account issuance

a) Foreigners come to the immigration management agency under the Ministry of Public Security or the provincial-level Public Security to present their passport or valid international travel documents and complete procedures to obtain a level 2 electronic identification account;

b) Foreigners provide complete and accurate information on the Application for electronic identification account according to form TK01 issued with this Decree; clearly providing the owner's mobile phone number, citizen's email address (if any) and other information requested to be integrated into the National Identification Application for the receiving officer;

c) The receiving officer enters the information provided by the foreigner into the electronic identification and authentication system; collects facial photos and fingerprints of the arriving foreigner to authenticate with the National Database on Immigration;

d) The immigration authority sends a request for an electronic identification account to the electronic identification and authentication authority;

d) The electronic identification and authentication management agency shall notify the account registration results via the National Identification Application or the owner's mobile phone number or email address;

e) Foreigners under 14 years of age, persons under guardianship, persons under representation, and their representatives or guardians must go to the immigration management agency under the Ministry of Public Security or the provincial-level Public Security to complete procedures for granting a level 02 electronic identification account;

Representatives and guardians use their own mobile phone numbers to ｄｅｃｌａｒｅ and register for level 02 electronic identification accounts for foreigners who are from 06 to under 14 years old, wards, and representatives.

Article 12. Procedures for granting electronic identification accounts to agencies and organizations

1. The legal representative, head of the agency or organization, or the person authorized by the legal representative or head to use his/her level 02 electronic identification account logs into the National Identification Application, provides information according to the instructions and sends a request for an electronic identification account to the agency or organization after obtaining the consent of all other legal representatives of the organization (if any).

In case of direct submission, the legal representative, head of the agency, organization or authorized person shall ｄｅｃｌａｒｅ the Application for issuance of an electronic identification account for the agency or organization according to form TK02 issued with this Decree, and submit the application to the Electronic Identification and Authentication Management Agency or the ID management agency at a convenient location.

2. The electronic identification and authentication management agency shall verify and authenticate information about agencies and organizations in the National Database on Business Registration, national databases and other specialized databases.

In case information about an agency or organization is not yet available in the National Database on Business Registration, national database and other specialized databases, verification of information about the agency or organization must be performed.

3. The electronic identification and authentication management agency shall notify the results of the registration for granting an electronic identification account to the legal representative, head of the agency or organization performing the procedure via the National Identification Application or the owner's mobile phone number or email address.

In case the conditions for granting an electronic identification account are not met, the electronic identification and authentication management agency shall notify in writing, via text message or via the electronic identification account of the person making the registration.

Article 13. Time limit for processing electronic identification account issuance

From the date of receiving a complete and valid dossier as prescribed in this Decree, the electronic identification and authentication management agency shall be responsible for resolving the issuance of an electronic identification account within the following time limit:

1. For Vietnamese citizens who already have a valid citizen identification card:

a) No more than 01 working day for cases of granting level 01 electronic identification accounts;

b) No more than 03 working days for cases of granting level 02 electronic identification accounts.

2. For Vietnamese citizens whose citizen identification cards have expired or do not have an identification card, no more than 07 working days.

3. For foreigners:

a) No more than 01 working day for cases of granting level 01 electronic identification accounts;

b) No more than 03 working days for cases of granting level 02 electronic identification accounts with information on facial photos and fingerprints in the National Database on Immigration;

c) No more than 07 working days for cases of granting level 02 electronic identification accounts but there is no information about facial photos and fingerprints in the National Database on Immigration.

4. For organizations:

a) No more than 03 working days in cases where the information requiring authentication about the organization is already in the national database or specialized database;

b) No more than 15 days in cases where the information to be verified about the organization is not in the national database or specialized database.

Article 14. Activation and use of electronic identification accounts

1. The electronic identity subject shall activate the electronic identity account of the individual, agency, or organization on the National Identification Application within 07 days from the date of receipt of the notification of the results of the issuance of the electronic identity account. After 07 days, if the electronic identity account is not activated, the electronic identity subject shall contact the electronic identification and authentication management agency through the switchboard for receiving and resolving requests for electronic identification and authentication to activate the electronic identity account.

2. Persons under 14 years of age, persons under guardianship, and persons represented using electronic identification accounts must have the consent and confirmation of the representative or guardian through the National Identification Application. Representatives and guardians use the electronic identification accounts of persons under 14 years of age, persons under guardianship, and persons represented to conduct transactions and other activities to serve their rights and interests.

3. The use of electronic identification accounts and electronic authentication services has legal value to affirm and prove that the electronic identity subject has performed and approved the transaction.

4. The electronic identification and authentication management agency shall connect, share, and authenticate data for electronic identity subjects to use electronic identification accounts in other countries according to international treaties to which Vietnam is a signatory.

Article 15. Procedures for locking and unlocking electronic identification accounts

1. Lock and unlock electronic identification accounts of Vietnamese citizens.

The electronic identification and authentication system automatically locks and unlocks a citizen's electronic identification account when the citizen's electronic identification card is locked or unlocked or the citizen identification card or identification card expires.

2. Lock electronic identification accounts of foreigners and organizations

a) The electronic identification and authentication system automatically records, checks, authenticates and locks the electronic identification account in case a foreigner requests to lock his/her electronic identification account; the foreigner violates the agreement on using the National Identification Application; the foreigner's passport or international travel document expires; the foreigner's residence in Vietnam expires; the foreigner dies. The recording is done through the foreigner's declaration on the National Identification Application or the updating of information specified in Article 8 of this Decree;

b) The electronic identification and authentication system automatically records, checks, authenticates and locks electronic identification accounts in case an organization requests to lock its electronic identification account or the organization violates the agreement on using the National Identification Application or the organization is dissolved, bankrupt, suspended or terminated in accordance with the provisions of law. The recording is done through the organization declaring on the National Identification Application or updating the information specified in Article 8 of this Decree;

c) The agency conducting the proceedings and other competent agencies shall send the Request for locking or unlocking the electronic identification account or electronic ID card according to form TK03 issued with this Decree to the nearest commune, ward or town police or the nearest provincial or district police identification management agency for receipt and processing;

d) Within 01 working day from the date of receipt of the Request for locking or unlocking the electronic identification account or electronic identification card from the prosecution agency, other competent agencies, the Commune, Ward or Town Police or the provincial-level Police identification management agency or the District Police where the request is received must consider and forward the request for locking the electronic identification account to the head of the identification management agency of the Ministry of Public Security for consideration and approval through the electronic identification and authentication system;

d) Within 02 working days from the date of receiving the proposal from the Commune, Ward, Town Police or the provincial or district-level Police ID management agency, the head of the Ministry of Public Security ID management agency shall consider and approve the case of request to lock the electronic identification account as prescribed in Clause 2 of this Article and notify the agency requesting to lock the electronic identification account and the subject of the locked account. In case of refusal to lock the electronic identification account, a written response stating the reason shall be issued.

3. Unlock electronic identification account

a) The electronic identification and authentication system automatically unlocks the electronic identification account when there is no longer a basis for locking the electronic identification account;

b) The agency conducting the proceedings or other competent agencies shall send the Request for locking or unlocking the electronic identification account or electronic identification card to the nearest commune, ward or town police or the nearest provincial or district police identification management agency for receipt and processing;

c) Within 01 working day from the date of receiving the Request for locking or unlocking the electronic identification account or electronic identification card from the prosecution agency or other competent authority, the Commune, Ward or Town Police or the Provincial Police or District Police where the request is received must consider and forward the request for unlocking the electronic identification account to the head of the Ministry of Public Security's identification management agency for consideration and approval through the electronic identification and authentication system;

d) Within 02 working days from the date of receiving the proposal from the Commune, Ward, Town Police or the provincial or district-level Police ID management agency, the head of the Ministry of Public Security ID management agency shall consider and approve the case of request to unlock the electronic identification account specified in Clause 2 of this Article and notify the agency requesting the unlocking of the electronic identification account and the subject whose account is unlocked. In case of refusal to unlock the electronic identification account, a written response stating the reason shall be issued.

Article 16. Authority to ｇｒａｎｔ, lock, and unlock electronic identification accounts for Vietnamese citizens, foreigners, agencies, and organizations

The Director of the Department of Administrative Police for Social Order - Ministry of Public Security has the authority to issue, lock, and unlock electronic identification accounts for Vietnamese citizens, foreigners, agencies, and organizations.

Article 17. Storing information in the electronic identification and authentication system

1. All electronic identity information and other information incorporated into the electronic identity account is permanently stored in the electronic identification and authentication system.

2. All access history information of electronic identification accounts is stored in the electronic identification and authentication system for a minimum period of 05 years from the time of access. Account owners are allowed to exploit information about their access history of electronic identification accounts; the agency managing the electronic identification and authentication system is allowed to exploit information about account access history to serve state management work; other cases are implemented according to the provisions of law.

Article 18. Conditions and procedures for connecting to the electronic identification and authentication system

1. State agencies, political organizations, socio-political organizations, and public service providers that connect the information systems they manage with electronic identification and authentication systems must ensure that the information systems they manage meet the requirements for ensuring information system security at at least level 3 according to the provisions of law on ensuring information system security by level.

2. The connection and sharing of information as prescribed in Clause 1 of this Article shall be carried out on the basis of a written agreement between the electronic identification and authentication management agency and the agency or organization managing the database or information system that needs to be connected, clearly stating the scope and purpose of the connection.

3. Within no more than 30 days from the date of written agreement specified in Clause 3 of this Article, the electronic identification and authentication management agency shall conduct an appraisal and actual inspection of the database and information system of the agency or organization requesting the connection; in case the database and information system of the agency or organization has been connected to the National Population Database, the time limit for consideration and permission for connection shall not exceed 07 working days.

In case of agreement to allow connection, the electronic identification and authentication management agency shall notify the agency or organization in writing and carry out the connection according to the unified document. In case of disagreement to allow connection, a written response must be provided stating the reasons.

4. Agencies and organizations not specified in Clause 1 of this Article shall connect to the electronic identification and authentication system through an organization providing electronic authentication services.

5. Organizations providing electronic authentication services connected to the electronic identification and authentication system to provide electronic authentication services are not required to carry out the procedures specified in this Article.

Article 19. Electronic authentication

1. Electronic authentication of electronic identities and electronic identification accounts is performed through the electronic identification and authentication system and electronic identification and authentication platform as prescribed in this Decree.

2. State agencies, political organizations, socio-political organizations, and public service providers are required to authenticate electronically through connecting and sharing information with the electronic identification and authentication system or connecting and sharing information with the national database or specialized database containing information requiring electronic authentication.

3. Organizations and individuals not specified in Clause 2 of this Article are required to authenticate electronically through the services of organizations providing electronic authentication services; the implementation of electronic authentication for electronic identities and electronic identification accounts at the request of organizations and individuals specified in this Clause must have the consent of the electronic identity subject through confirmation on the National Identification Application, SMS messages via the owner's phone number or other forms of confirmation as prescribed.

4. Organizations and individuals are not allowed to provide or share electronic authentication results with other organizations and individuals, except in cases where the law on personal data protection provides otherwise; electronic authentication results are not valid as authentication factors in other transactions.

Article 20. Level of authentication of electronic identification accounts

1. The electronic identification and authentication system provides the following levels of electronic identification account authentication:

a) Level 01: Electronic identification account authentication is performed based on an authentication factor as prescribed in Clause 7, Article 3 and the corresponding authentication means as prescribed in Clause 8, Article 3 of this Decree, which does not include biometric information.

b) Level 02: Electronic identification account authentication is performed based on two different authentication factors as prescribed in Clause 7, Article 3 and the corresponding authentication means in Clause 8, Article 3 of this Decree, which does not include biometric information.

c) Level 03: Electronic identification account authentication is performed based on two or more different authentication factors as prescribed in Clause 7, Article 3 and the corresponding authentication means in Clause 8, Article 3 of this Decree, including biometric information.

d) Level 04: Electronic identity account authentication is performed based on authentication factors including at least 01 biometric factor (face photo, fingerprint, voice, iris), at least 01 factor owned by the electronic identity subject (ID card, digital device, software) and 01 factor known to the electronic identity subject (password; secret code; 2D barcode).

2. For other electronic transaction accounts created by agencies, organizations and individuals, refer to the provisions in Clause 1 of this Article to classify and identify them in accordance with each business and process of that agency, organization or individual or according to the provisions of specialized laws and instructions of competent state management agencies in each field.

Article 21. Electronic authentication methods in performing transactions through electronic identification and authentication systems

1. Electronic authentication for online transactions is performed through authentication means appropriate to the level of authentication required by the organization providing that online service.

2. For cases of account information authentication at the place of transaction, authentication is performed via the authentication solution provided in the National Identification Application.

Chapter III

ELECTRONIC AUTHENTICATION SERVICES

Article 22. Electronic authentication services

1. Electronic authentication service is a conditional business line.

2. Organizations providing electronic authentication services must ensure the conditions specified in Article 23 of this Decree and be granted a certificate of eligibility to provide electronic authentication services by the Ministry of Public Security.

3. Organizations providing electronic authentication services are responsible for posting the list of electronic authentication products and services they provide on the electronic identification information page.

Article 23. Conditions for providing electronic authentication services

1. Conditions on organizations and enterprises

Public service units and enterprises in the People's Public Security.

2. Personnel conditions

a) The head of the organization and legal representative of the enterprise must be a Vietnamese citizen and permanently residing in Vietnam;

b) Organizations and enterprises must have personnel with a university degree or higher in information security or information technology or telecommunications electronics responsible for providing services, system administration, system operation, and ensuring system information security.

3. Conditions on facilities, technical equipment, service provision management processes and security and order assurance plans

Organizations and enterprises requesting a Certificate of eligibility to provide electronic authentication services must have a Service Provision Operation Plan including the following contents: Plan and process for providing electronic authentication services including an explanation of the information technology system; explanation of technical plans on technological solutions; storage plan, ensuring data integrity, ensuring information security of the service provision system; plan to protect personal and organizational data; plan to ensure security and order; plan for fire prevention and fighting, disaster preparedness and ensuring stable and smooth operation of electronic authentication services; technical equipment must be located in Vietnam and inspected for information security and safety according to the provisions of law.

4. Organizations providing electronic authentication services are authorized to authorize other organizations to perform a number of activities including: consulting, introducing, and answering questions about electronic authentication services; finding partners, negotiating, and agreeing on contents related to activities and utilities of providing authentication services; supporting and taking care of customers using the service and other trade promotion activities in accordance with the provisions of law. Entrusted activities are performed in accordance with the provisions of law.

Article 24. Dossier and procedures for granting Certificate of eligibility to conduct business in electronic authentication services

1. Profile composition:

a) Application form for a Certificate of eligibility to provide electronic authentication services according to form XT01 in the Appendix issued with this Decree;

b) Project and documents proving satisfaction of the conditions specified in Clause 2 and Clause 3, Article 23 of this Decree.

2. Order and time limit for settlement:

a) Organizations and enterprises shall submit 01 set of documents specified in Clause 1 of this Article directly or via the postal system to the Ministry of Public Security or submit the documents via the National Public Service Portal or the Public Service Portal of the Ministry of Public Security;

b) In case the dossier is incomplete or invalid, within 03 working days from the date of receipt of the dossier, the Ministry of Public Security shall be responsible for notifying in writing the organization or enterprise to supplement the dossier;

c) Within 03 working days from the date of receiving valid documents, the Ministry of Public Security is responsible for obtaining written opinions from relevant ministries and ministerial-level agencies;

d) Within 10 days from the date of receipt of the document from the Ministry of Public Security, the ministry or ministerial-level agency shall be responsible for inspecting, appraising and providing a written response to the Ministry of Public Security;

d) Within 30 days from the date of receiving a complete and valid dossier, the Ministry of Public Security shall conduct an appraisal and on-site inspection at the organization or enterprise and issue a Certificate of eligibility for electronic authentication service business according to form XT03 in the Appendix issued with this Decree to the qualified organization or enterprise; in case of refusal, a written notice stating the reason must be issued.

Article 25. Re-issuance and change of Certificate of eligibility for electronic authentication service business

1. The content of the certificate of eligibility to provide electronic authentication services may be changed in case the organization or enterprise changes one of the following information about the legal representative, head office address, transaction name, plan, or process assessed by the Ministry of Public Security according to the provisions of Clause 3, Article 23 of this Decree.

2. Organizations and enterprises shall submit 01 set of documents requesting to change the contents of the certificate of eligibility to provide electronic authentication services to the Ministry of Public Security according to the provisions of Point a, Clause 2, Article 24 of this Decree. The dossier requesting to adjust or change the contents of the License includes:

a) Application form for issuance, change or modification of the Certificate of eligibility for electronic authentication service business according to form XT02 in the Appendix issued with this Decree;

b) Legal documents and papers proving the content of the information change specified in Clause 1 of this Article.

3. In case an organization or enterprise changes any of the information about the legal representative, head office address, or transaction name, within 10 days from the date of receiving a complete and valid dossier, the Ministry of Public Security shall be responsible for assessing and issuing a certificate of eligibility to conduct electronic authentication services to the qualified organization or enterprise; in case of refusal to change, a written notice must be given stating the reason.

4. In case an organization or enterprise changes any of the information on the plan or operation process for providing electronic authentication services as prescribed in Clause 3, Article 23 of this Decree, within 30 days from the date of receiving a complete and valid dossier, the Ministry of Public Security shall conduct an appraisal, consult with relevant ministries and ministerial-level agencies, conduct a field inspection and issue a certificate of eligibility to provide electronic authentication services to the qualified organization or enterprise; in case of refusal to change, a written notice must be given stating the reasons.

5. The Certificate of Eligibility for Electronic Authentication Service Business shall be reissued in case of loss or damage that makes it unusable. The order and procedures for reissuing the Certificate of Eligibility for Electronic Authentication Service Business are as follows:

a) Organizations and enterprises shall submit 01 set of documents requesting re-issuance of the Certificate of eligibility to provide electronic authentication services to the Ministry of Public Security as prescribed in Point a, Clause 2, Article 24 of this Decree. The application for re-issuance of the Certificate includes: Application form for re-issuance or change of the Certificate of eligibility to provide electronic authentication services; Project and documents and papers proving the satisfaction of the conditions specified in Clause 2 and Clause 3, Article 23 of this Decree;

b) Within 03 working days from the date of receiving valid documents, the Ministry of Public Security shall consider and re-issue the Certificate of eligibility for electronic authentication service business to the organization providing electronic authentication services; in case of refusal to re-issue, a written notice must be given stating the reasons.

Article 26. Revocation of Certificate of eligibility for electronic authentication service business

1. An organization providing electronic authentication services shall have its Certificate of Eligibility for Electronic Authentication Service Business revoked in the following cases:

a) Not operating continuously for 06 months or more;

b) Dissolved or bankrupt according to the provisions of law;

c) Failure to remedy violations of personal data protection, information security, and network security as required by competent state agencies.

2. The Ministry of Public Security shall issue a decision on the revocation of the Certificate of eligibility for electronic authentication service business according to form XT04 in the Appendix issued with this Decree.

3. An organization providing electronic authentication services whose Certificate of Eligibility for Electronic Authentication Service Business is revoked is responsible for ensuring the legitimate rights and interests of the electronic identity subject and related parties in accordance with the provisions of law.

Article 27. Costs of granting and using electronic identification accounts and using electronic authentication services

1. Electronic identity subjects are agencies, organizations, Vietnamese citizens, and foreigners who do not have to pay the registration fee for an electronic identity account created by the electronic identification and authentication system and the fee for using their electronic identity account in electronic transactions.

2. Organizations and individuals exploiting electronic authentication services shall pay costs to organizations providing electronic authentication services in accordance with the provisions of law on prices.

3. State agencies, political organizations, and socio-political organizations do not have to pay fees when using electronic authentication services.

Chapter IV

Electronic ID

Article 28. Issuance of electronic identification cards

1. Electronic ID is presented as a feature and utility of the National Identification Application through access to citizens' electronic identification accounts.

2. Electronic identification cards are issued together with the issuance of level 02 electronic identification accounts to Vietnamese citizens and are carried out in accordance with the procedures prescribed in Article 10 of this Decree.

3. The use of electronic identification through accessing a citizen's level 02 electronic identification account has the same value as using a valid citizen identification card in performing administrative procedures, public services, transactions and other activities.

4. Electronic ID cards are permanently stored in the electronic identification and authentication system. Historical information on the use of electronic ID cards is stored in the electronic identification and authentication system for a period of 05 years from the date of use.

5. The Minister of Public Security shall prescribe the form of presentation of electronic identification on the National Identification Application.

Article 29. Procedures for locking electronic identification cards

1. The electronic identification and authentication system automatically records, checks, authenticates and locks electronic identification in the cases specified in Points b, c and d, Clause 1, Article 34 of the Law on Identification. The recording is carried out through updating information into the electronic identification and authentication system specified in Article 8 of this Decree.

2. The person who is granted an electronic ID card shall make a request to lock the electronic ID card directly at the Commune, Ward, or Town Police or the nearest provincial or district-level Police ID management agency or through the National Identification Application according to form TK03 issued with this Decree. The ID management agency shall be responsible for recording, checking, authenticating, and locking the electronic ID card immediately after receiving the citizen's request to lock the electronic ID card on the electronic identification and authentication system.

3. The prosecuting agency or other competent authority shall send a written request to lock the electronic ID card to the nearest commune, ward or town police or provincial or district police identification management agency for receipt and processing.

4. Within 01 working day from the date of receipt of the request to lock the electronic ID card from the prosecution agency or other competent authority, the Commune, Ward or Town Police or the Provincial Police or District Police ID management agency where the request is received must review and forward the request to lock the electronic ID card to the head of the Ministry of Public Security ID management agency for consideration and approval through the electronic identification and authentication system.

5. Within 02 working days from the date of receiving the proposal from the Commune, Ward, Town Police or the provincial or district-level Police ID management agency, the head of the Ministry of Public Security ID management agency shall consider and approve the case of requesting to lock the electronic ID as prescribed in Clause 2 of this Article and notify the agency requesting to lock the electronic ID and the citizen. In case of refusal to lock the electronic ID, a written response stating the reason shall be issued.

Article 30. Procedures for unlocking electronic identification cards

1. The electronic identification and authentication system automatically scans, checks and unlocks the electronic ID when there is no longer a basis for locking the electronic ID.

2. A person whose electronic ID card is locked shall request to unlock the electronic ID card directly at the Commune, Ward, or Town Police or the nearest provincial or district-level Police ID management agency or through the National Identification Application according to form TK03 issued with this Decree. The ID management agency shall be responsible for recording, checking, authenticating, and unlocking the electronic ID card immediately after receiving the citizen's request to unlock the electronic ID card on the electronic identification and authentication system.

3. The prosecution agency or other competent authority shall send a written request to unlock the electronic ID card to the nearest commune, ward or town police or provincial or district police identification management agency for receipt and processing.

4. Within 01 working day from the date of receipt of the request to unlock the electronic ID card from the prosecution agency or other competent authority, the Commune, Ward or Town Police or the Provincial Police or District Police ID management agency where the request is received must review and forward the request to unlock the electronic ID card to the head of the Ministry of Public Security ID management agency for consideration and approval through the electronic identification and authentication system.

5. Within 02 working days from the date of receiving the proposal from the Commune, Ward, Town Police or the provincial or district-level Police ID management agency, the head of the Ministry of Public Security ID management agency shall consider and approve the case of request to unlock the electronic ID as prescribed in Clause 2 of this Article and notify the agency requesting to unlock the electronic ID and the citizen. In case of refusal to unlock the electronic ID, a written response stating the reason shall be issued.

Chapter V

RESPONSIBILITIES OF AGENCIES, ORGANIZATIONS AND INDIVIDUALS

Article 31. Responsibilities of electronic identity subjects

1. Protect electronic identity information.

2. Ensure the security of authentication factors.

3. Immediately notify the electronic authentication service provider when losing control of the authentication device or discovering someone illegally using your electronic identity or other reasons that may cause unsafe use of the service.

Article 32. Responsibilities of the party using electronic authentication services

1. Comply with technical standards on electronic identification and authentication.

2. Manage and secure electronic identification account information, ensure safe use of electronic identification accounts.

3. Be responsible for the transactions made and the regulations of the relevant parties for electronic transactions.

Article 33. Responsibilities of organizations providing electronic authentication services and agencies, organizations and individuals creating their own accounts

1. Responsibilities of organizations providing electronic authentication services

a) Provide electronic authentication services to organizations and individuals on the basis of agreement in service provision contracts;

b) Manage the activities of organizations authorized to provide electronic authentication products and services as prescribed in Clause 4, Article 23 of this Decree;

c) Ensure that the information reception channel and service use are continuous 24 hours a day and 7 days a week;

d) Comply with the provisions of law on network information security, network security, electronic transactions, standards and technical regulations in the field of electronic authentication, information security, ensuring the accuracy of authentication; promulgate electronic authentication procedures and obtain the consent of the electronic identification and authentication management agency;

d) Comply with the plan and operating procedures for providing electronic authentication services that have been approved by the Ministry of Public Security;

e) Submit periodic reports every 06 months and 01 year on electronic authentication activities according to form XT05 in the Appendix issued with this Decree to the electronic identification and authentication management agency or when requested by the electronic identification and authentication management agency.

2. Responsibilities of agencies, organizations and individuals who create accounts to serve their own activities:

a) Be responsible for the accuracy of the account you create;

b) Protect personal data collected and managed by you in accordance with the provisions of law;

c) Ensure the consent of data subjects in all activities related to data management, exploitation and use;

d) ｄｅｌｅｔｅ collected and managed data upon request of the data subject, unless otherwise provided by law.

Article 34. Responsibilities of the Ministry of Public Security

1. Building, managing, protecting and operating the electronic identification and authentication system; electronic identification and authentication platform, applying electronic identification accounts to state management, administrative reform, and prevention and control of natural disasters and epidemics.

2. Implement state management of electronic identification and authentication. Unify regulations on principles and structures of identification numbers of foreigners and identification numbers of agencies and organizations.

3. Preside over and coordinate with ministries and ministerial-level agencies in connecting national databases and specialized databases to serve electronic identification and authentication.

4. Preside over and coordinate with the Ministry of Information and Communications, Ministry of Planning and Investment, Ministry of Justice, Ministry of National Defense, Government Office and relevant ministries and ministerial-level agencies to conduct inspections and examinations of electronic identification and authentication activities.

5. Connect and integrate the electronic identification and authentication system with the Electronic Identification Exchange Platform of the National Public Service Portal to serve account checking, administrative procedure settlement, and online public service provision in accordance with the law.

6. Preside over and coordinate with the Ministry of Information and Communications, the Ministry of National Defense, and the Government Cipher Committee to ensure information security and confidentiality for the electronic identification and authentication system.

7. Preside over and coordinate with ministries, ministerial-level agencies, government agencies, the Government Cipher Committee, and People's Committees of provinces and centrally run cities to unify plans for connecting, sharing, and exploiting data to use electronic identities, electronic identification accounts, and electronic identification cards; ensure confidentiality, safety, and information security, consistent with the method of performing administrative procedures directly and in the electronic environment.

8. Preside over and coordinate with ministries, ministerial-level agencies, government agencies, the Government Cipher Committee, and People's Committees of provinces and centrally run cities to unify plans for connection, sharing, and exploitation to use electronic identities, electronic identification accounts, and electronic identification cards provided and created by the electronic identification and authentication system; ensure confidentiality, safety, and information security, consistent with the method of performing administrative procedures directly and in the electronic environment.

9. Preside over and coordinate with the Ministry of Justice, the Ministry of Planning and Investment, and the Ministry of National Defense in ensuring connection, sharing, and updating of information in the National Population Database, the National Immigration Database, the Electronic Civil Status Database, and the National Business Registration Database to serve electronic identification and authentication.

10. Ensure the information reception channel and the use of the electronic identification and authentication system continuously 24 hours a day and 07 days a week.

Article 35. Responsibilities of the Ministry of Information and Communications

Coordinate with the Ministry of Public Security and the Ministry of National Defense to ensure information security and confidentiality for the electronic identification and authentication system.

Article 36. Responsibilities of the Ministry of Planning and Investment

1. Preside over and coordinate with the Ministry of Public Security and relevant ministries and branches to unify the plan to connect and share information of agencies and organizations in the National Database on Business Registration with the electronic identification and authentication system to create identification numbers and electronic identification accounts of agencies and organizations to serve electronic identification and authentication activities; ensure information safety and security.

2. Coordinate with the Ministry of Public Security in the work of granting and managing electronic identification accounts for organizations and enterprises within the scope, functions and assigned tasks.

3. Ensure the use of electronic identity and electronic identification accounts to perform administrative procedures and public administrative services in the electronic environment within the management functions prescribed by law.

Article 37. Responsibilities of the Ministry of National Defense

1. Guide affiliated agencies, units, enterprises and individuals to implement electronic identification and authentication to ensure compliance with regulations on protecting state secrets in the defense sector.

2. Coordinate with the Ministry of Public Security to agree on a connection and sharing plan to use electronic identities, electronic identification accounts, and electronic identification cards provided and created by the electronic identification and authentication system.

3. Coordinate with the Ministry of Public Security in ensuring information security and network security for the electronic identification and authentication system.

Article 38. Responsibilities of the Government Cipher Committee

1. Guidance on the application of civil cryptographic standards and technical regulations and the use of specialized digital signature certification services for public services in electronic identification and authentication activities.

2. Preside and coordinate with the Ministry of Public Security to assess cryptographic security for users of electronic authentication services.

3. Coordinate with the Ministry of Public Security to ensure the safety and security of information using cryptographic products for electronic identification and authentication systems, using electronic identities, electronic identification accounts, and electronic identification cards in providing specialized digital signature services for public service.

Article 39. Responsibilities of ministries, ministerial-level agencies, government agencies, People's Committees of provinces and centrally run cities

1. Ensure the use of electronic identity, electronic identification accounts, and electronic identification cards to perform administrative procedures and public administrative services in the electronic environment.

2. Coordinate with the Ministry of Public Security to agree on a connection and sharing plan to use electronic identities, electronic identification accounts, and electronic identification cards provided and created by the Electronic Identification and Authentication System; ensure information safety and security.

3. Ensure stable and smooth operation of national databases and specialized databases in authentication at the request of specialized database management agencies, state agencies, political organizations, socio-political organizations, and other organizations assigned to perform public services.

Chapter VI

TERMS ENFORCEMENT

Article 40. Enforcement

1. This Decree takes effect from March 01, 7.

2. Decree No. 59/2022/ND-CP dated September 05, 9 of the Government regulating electronic identification and authentication ceases to be effective from the effective date of this Decree.

3. Accounts created by the National Public Service Portal, the administrative procedure settlement information system at the ministerial and provincial levels issued to individuals can be used until June 30, 6.

4. Accounts created by the National Public Service Portal, the administrative procedure settlement information system at the ministerial and provincial levels for agencies and organizations are valid until June 30, 6.

5. Electronic identification accounts and certificates of eligibility for electronic authentication service business issued in accordance with Decree No. 59/2022/ND-CP dated September 05, 9 on electronic identification and authentication remain valid until the prescribed expiration date.

6. For citizens who already have a level 02 electronic identification account before the effective date of this Decree, the identification management agency of the Ministry of Public Security shall be responsible for creating and displaying electronic identification for citizens through the National Identification Application from July 01, 7.

7. Amend and supplement Clause 1, Article 7 of Decree No. 45/2020/ND-CP dated April 08, 4 on performing administrative procedures in the electronic environment as follows:

“1. Organizations and individuals perform administrative procedures on the National Public Service Portal, the Information System for handling administrative procedures at the ministerial and provincial levels using electronic identification accounts created by the electronic identification and authentication system, connected and integrated on the National Public Service Portal, the Information System for handling administrative procedures at the ministerial and provincial levels”.

8. Amend and supplement Point a, Clause 1, Article 21a of Decree No. 107/2021/ND-CP dated December 06, 12 amending and supplementing a number of articles of Decree No. 2021/61/ND-CP dated April 2018, 23 of the Government on implementing the one-stop and inter-connected one-stop mechanism in handling administrative procedures as follows:

“a) Check and authenticate the electronic identification account of an individual or organization through the personal identification number of a Vietnamese citizen or the passport number (or international travel document number) of a foreigner and the organization's code on the administrative procedure settlement information system at the ministerial and provincial levels through connecting and sharing data with the electronic identification and authentication system. In case an organization or individual does not have an electronic identification account, the officer receiving the application at the One-Stop Section will guide the individual or organization to implement or support the creation of a level 01 electronic identification account for the citizen. In case of authorization to settle administrative procedures, the electronic identification account is determined to be the electronic identification account of the authorizing organization or individual.”

Article 41. Responsible for implementing

1. The Ministry of Public Security is responsible for guiding, inspecting and urging the implementation of this Decree.

2. During the implementation process, the Ministry of Public Security shall coordinate with the Ministry of Information and Communications to synthesize and handle issues according to its state management functions. If necessary, it shall report to the Prime Minister for consideration and decision.

3. Ministers, Heads of ministerial-level agencies, Heads of Government agencies, Chairmen of People's Committees of provinces and centrally run cities are responsible for implementing this Decree./.

Appendix

(Attached to Decree No. 69/2024/ND-CP dated June 25, 6)

Model TK01

SOCIAL REPUBLIC OF VIETNAMIndependence - Freedom - Happiness -----

PROPOSAL FORM

Issue electronic identification accounts and electronic identity cards

(For Vietnamese citizens and foreigners)

APPLICATION FORM FOR ELECTRONIC IDENTITY ACCOUNT

 (Used for Vietnamese citizens and foreigners)

A. THE PROPOSER THE APPLICANT:

1. Last name, middle name and first name (in capital letters):……………………………………………………………….

Full name (in capital letters)

2. Personal identification number/Passport or international travel document number:………………….

Personal Identification Number/Passport or International Travel Document number

3. Date of birth:……./………/……… 

Date of birth

4. Phone number:………………………………………………………………………………………………

telephone number

5. Email: ……………………………………………………………………………………………………….

B. REGISTER TO INTEGRATE INFORMATION TO ELECTRONIC IDENTIFICATION ACCOUNT

REGISTER TO INTEGRATE INFORMATION INTO ELECTRONIC IDENTITY ACCOUNT

(Fill in full information: (1) Name of the type of document requested for integration; (2) Specify the information in the document to be integrated. For example: 1) Driver's license (Driver's license number; Class; Date, month, year of issue; Issuing unit; Valid until)

(Fill in all the following information: (1) Name of document type requested for integration; (2) Specify the information in the documents that need to be integrated. For example: 1) Driver's license (Driver's license number; Class; Date, month, year of issue; Issuing authority; Date of Expiry)

1. ………………………………………………………………………………………………………………..

2. ………………………………………………………………………………………………………………..

3. ………………………………………………………………………………………………………………..

4. ………………………………………………………………………………………………………………..

5. ………………………………………………………………………………………………………………..

C. REGISTERING AN ELECTRONIC IDENTIFICATION ACCOUNT FOR PERSONS UNDER 14 YEARS OLD, REPRESENTATIVES, GUARDIANS

REGISTER AN ELECTRONIC IDENTITY ACCOUNT FOR PEOPLE UNDER 14 YEARS OLD, REPRESENTED PERSON, THE WARD

1. Information of persons under 14 years of age, representatives, and guardians

Information for people under 14 years old, representing person, the ward

1.1. Last name, middle name and first name (in capital letters):……………………………………………………………..

Full name (in capital letters)

1.2. Personal identification number/Passport or international travel document:……………………

Personal Identification Number/Passport or International Travel Document number

1.3. Date of birth:……………………………………………………………………………….

Date of birth

1.4. Relationship with the proposer:…………………………………………………………………….

Relationship with the applicant

D. COMMITMENT OF THE PROPOSER

COMMITMENT OF THE APPLICANT

1. I hereby certify that the information provided in this application is true and correct and I am fully responsible before the law for the accuracy and truthfulness of the documents provided.

I commit that the information provided in this application is true, and I take full responsibility before the law for the accuracy and truthfulness of the documents provided.

2. I agree to use electronic identification and authentication services, and commit to taking responsibility for managing and using the account in accordance with the law.

I agree to use electronic identification and authentication services and commit to be responsible in managing and using the account in accordance with the law.

Model TK02

SOCIAL REPUBLIC OF VIETNAMIndependence - Freedom - Happiness -----

PROPOSAL FORM

Issue electronic identification account

(For agencies and organizations)

A. REGISTRANT INFORMATION

1. Surname, middle name and first name:……………………………………………………………………………………..

2. Personal identification number/CCCD:………………………………………………………………………….

3. Nationality: ¨ Vietnam; Other nationalities: …………………………………………………………..

B. INFORMATION ABOUT THE AGENCY AND ORGANIZATION

1. Vietnamese name of the agency or organization: ……………………………………………………………….

2. Abbreviation: ………………………………………………………………………………………………..

3. English name: …………………………………………………………………………………………….

4. Date of establishment: …………………………………………………………………………..

5. Head office address: ……………………………………………………………………………………..

6. Field of operation: …………………………………………………………………………………….

7. Organization/enterprise code: ………………………………………………………………………..

8. Business area: ……………………………………………………………………………………

9. Line of business: ……………………………………………………………………………….

10. Organization tax code (if any): ………………………………………………………………………..

11. Surname, middle name and first name of the representative of the agency or organization:………………………………….

..................................................................................................................

12. Personal identification number/CCCD of the representative of the agency or organization:………………………

..................................................................................................................

13. Nationality of the representative of the agency or organization: □ Vietnam; Other nationalities: …………

C. REGISTRANT COMMITMENT

I hereby certify that the information declared in this application is true and I am fully responsible before the law for the accuracy and truthfulness of the documents provided.

Model TK03

SOCIAL REPUBLIC OF VIETNAM Independence - Freedom - Happiness-----

PROPOSAL FORM

Lock, unlock electronic identification accounts, electronic identity cards

Dear ⁽¹⁾ : ……………………………………………………….

I. APPLICANT INFORMATION:

1. Surname, middle name and first name: …………………………

2. Date of birth:……. /…….. / ………

3. Gender (Male/Female): ………………………….

4. Place of residence: ……………………………………

Suggested content:

II. INFORMATION ON ELECTRONIC IDENTIFICATION ACCOUNTS, ELECTRONIC IDENTIFICATION CARD REQUESTS TO LOCK, UNLOCK

A. Information for individuals

1. Surname, middle name and first name: ……………………..

2. Date of birth: ………./…./……..

3. Gender (Male/Female): ………………………

4. Place of residence: …………………………………

B. Information about agencies and organizations

1. Name of agency, organization: …………………………………………………………………………

2. Date of establishment: .…………………………………………………………………

3. Head office address: ……………………………………………………………………………

4. Field of operation: ……………………………………………………………………………

5. Tax code (if any): ……………………………………………………………………………

6. Business registration number (if any): …………………………………………………………………

7. Information of the legal representative of the agency or organization:

– Last name, middle name and first name: ………………………………………………………………………………

– Personal identification number: ……………………………………………………………………………

Suggested reason:

............................................................................................................

............................................................................................................

I hereby certify that the above information is true.

Suggestion⁽¹⁾:………………………… consider, resolve.

Note:

(1) Record the name of the police agency that receives the request to lock or unlock the electronic identification account or electronic ID card.

Model XT01

APPLICATION FORM

Issuance of certificate of eligibility for electronic authentication service business

To: Ministry of Public Security.

Pursuant to Decree No. …./2024/ND-CP dated… month… year 2024 of the Government regulating electronic identification and authentication;

................... ⁽¹⁾ Request the Ministry of Public Security to ｇｒａｎｔ a license to conduct business in electronic authentication services with the following contents:

I. Information about the organization requesting the certificate

1. Vietnamese transaction name:………………………………………………………………………………..

2. Vietnamese abbreviation:……………………………………………………………………………………

3. English transaction name:………………………………………………………………………………..

4. English abbreviation:…………………..

5. Business registration certificate/establishment decision number:………………………………….. ;

issued on… month… year………; issuing authority:………………………………………………………..

6. Head office address:………………………………………………………………………………………

7. Phone:…………………………………………………………………………………………………..

8. Fax:…………………………………………………………………………………………………………..

9. E-mail:……………………………………………………………………………………………………….

10. Website:……………………………………………………………………………………………………

11. Name and contact address of legal representative:

..................................................................................................................

II. Application for certificate of eligibility to conduct electronic authentication service business

.................. .. ⁽¹⁾ We are committed to taking responsibility for the accuracy of the information provided above and the accompanying documents and are committed to complying with the provisions of law.

LEGAL REPRESENTATIVE OF THE ORGANIZATION (Signature/digital signature of legal representative, seal/digital signature of organization)

⁽¹⁾ Name of the organization requesting the certificate.

Model XT02

APPLICATION FORM

Re-issuance/change of Certificate of eligibility for electronic authentication service business

To: Ministry of Public Security.

Pursuant to Decree No. …/2024/ND-CP dated… month… year 2024 of the Government regulating electronic identification and authentication;

Pursuant to the Certificate of eligibility for electronic authentication service business No. …./GCN-BCA dated …/…./….. of the Ministry of Public Security.

........................ ⁽¹⁾ Request the Ministry of Public Security to reissue/change the certificate of eligibility to conduct business in electronic authentication services with the following contents:

1. Information about the organization requesting re-issuance/change of certificate

Vietnamese transaction name:……………………………………………………………………………………

Vietnamese abbreviation:……………………………………………………………………………………….

English transaction name:……………………………………………………………………………………

English abbreviation:……………………………………………………………………………………….

Head office address:………………………………………………………………………………………….

Phone:……………………………………………… Fax:……………………………………………….

E-mail: ……………………………………………………Website:…………………………………………

Name and contact address of legal representative:

..................................................................................................................

2. Reasons for re-issuing/changing the Certificate:

..................................................................................................................

3. Content of change of certificate:

..................................................................................................................

..................................................................................................................

4. ………………. ⁽¹⁾ We are committed to taking responsibility for the accuracy of the information provided above and the accompanying documents and are committed to complying with the provisions of law.

LEGAL REPRESENTATIVE OF THE ORGANIZATION(Signature/digital signature of legal representative, seal/digital signature of organization)

⁽¹⁾ Name of proposed organization.

Model XT03

CERTIFICATE

ELIGIBILITY TO DO ELECTRONIC AUTHENTICATION SERVICES

MINISTER OF PUBLIC SECURITY

Pursuant to Decree No. …/2024/ND-CP dated… month… year 2024 of the Government regulating electronic identification and authentication;

Pursuant to Decree No. 01/2018/ND-CP dated August 06, 8 of the Government stipulating the functions, tasks, powers and organizational structure of the Ministry of Public Security;

Consider the application for a certificate of eligibility to conduct electronic authentication services dated ... month ... year ... of …………. ⁽¹⁾;

At the request of the Director of the Police Department for Administrative Management of Social Order.

CERTIFICATION

Article 1. ..................... .. ⁽¹⁾ Eligible to conduct business in electronic authentication services have the following information:

1. Business transaction name in Vietnamese or foreign language:………………….

2. Full name of legal representative……………………………………………………………

3. Business registration certificate/establishment decision No.: ………………….. issued on… month… year………. ; issuing authority:

4. Tax code:……………………………………………………………………………………………

5. Head office address in Vietnam:……………………………………………………………………..

6. Phone number:………………………………………………………………………………………………

7. E-mail:……………………………………………………………………………………………………….

Article 2. ........................ .. ⁽¹⁾ must comply with the provisions of Decree No. .../2024/ND-CP dated ... month ... year 2024 of the Government regulating electronic identification and authentication and other relevant legal provisions.

Article 3. This certificate of eligibility for electronic authentication service business is effective from the date of signing.

⁽¹⁾ Name of the organization that issued the certificate.

Model XT04

DECISION

Regarding the revocation of the Certificate of eligibility for electronic authentication service business

MINISTER OF PUBLIC SECURITY

Pursuant to Decree No. …/2024/ND-CP dated… month… year 2024 of the Government regulating electronic identification and authentication;

Pursuant to Decree No. 01/2018/ND-CP dated August 06, 8 of the Government stipulating the functions, tasks, powers and organizational structure of the Ministry of Public Security;

At the request of the Director of the Police Department for administrative management of social order.

DECISION:

Article 1. ｒｅｖｏｋｅ the Certificate of eligibility to conduct business in electronic authentication services with the following information:

1. Certificate number: …………………….., issued on…. month…. year…………………………….

2. Organization name:………………………………………………………………………………………………..

3. Full name of legal representative……………………………………………………………

4. Tax code:……………………………………………………………………………………………….

5. Head office address in Vietnam:……………………………………………………………………..

Article 2. This Decision takes effect from the date of signing.

Article 3. The Department of Administrative Police for Social Order and the organizations and individuals named in Article 1 are responsible for implementing this Decision.

Model XT05

REPORT

On the provision of electronic authentication services

To: Ministry of Public Security.

Pursuant to Decree No. …../2024/ND-CP dated… month… year 2024 of the Government regulating electronic identification and authentication;

……………… ⁽¹⁾ Report to the Ministry of Public Security on the provision of electronic authentication services as follows:

1. Service content provided:……………………………………………………………………

2. Results of electronic authentication service provision activities from date …/…/….. to … date …/…/…..   (Regarding customer market, incidents; security activities, information safety, personal data protection ...)

..................................................................................................................

..................................................................................................................

..................................................................................................................

..................................................................................................................

..................................................................................................................

3. Related documents

4. ……………… ⁽¹⁾ We are committed to taking responsibility for the accuracy of the information provided above and the accompanying documents.

LEGAL REPRESENTATIVE OF THE ORGANIZATION(Signature/digital signature of legal representative, seal/digital signature of organization)

(1) Name of the organization making the report.