Keep database within 12 months for handling of acts of humiliating

Accordingly, Article 27 of this Decree points out clearly that keep a system log for a minimum time of 12 months to serve the investigation and handling of violations of the Law on Cyber Security as prescribed in Point b, Clause 2, Article 26 of the Law on Cyber Security.

In particular, Point b, Article 26 of the Law on Cyber Security prescribes on blocking the sharing of information, and remove the information on the service platforms or information systems after receiving a request from professional cyber security protection force as follows:

- Information in cyberspace with propaganda contents against the State such as Information distorting, defaming the authority’s administration, offending the nation, desecrating the national flag, emblem or anthem, great personalities, leaders, famous people, and national heroes...

- Information in cyberspace instigating riots or disruption of security or disturbance of public order.

- Information in cyberspace with disgracing or slandering contents includes:

• Information seriously offending the honor, prestige, or dignity of others
• Fabricated or false information harming the honor, prestige, or dignity of other people or harming lawful rights and interests of other agencies, organizations, or individuals.

- Information in cyberspace infringing upon economic management order includes:

Fabricated or false information in cyberspace causing public anxiety, damaging socio-economic activities, causing difficulties to activities of state agencies or persons on official duty...

Besides, Decree 53 also requires enterprises providing services on telecommunications networks must keep following information as archives: Account name, using time, credit card information, email address, network address of nearest log-in and log-out, registered telephone number...of users within at the minimum time of 24 months. This Circular takes effect on October 01, 2022.