DPO Radio
AesirX ComplianceOne | Vietnam eID & e-Authentication Law
VIETNAM ELECTRONIC ID & AUTHENTICATION LAW [DRAFT]
Prepare for a Wider Electronic Identity and Authentication Regime
Track consultation changes, assess operational impact, and organize readiness evidence across identity, privacy, security, AI, and provider governance.
Why the Draft Law Matters
Vietnam's Ministry of Public Security opened consultation on the Draft Law on Electronic Identification and Authentication from 13 July to 2 August 2026. The draft has no assigned law number or final effective date and may change before promulgation.
Its proposed scope reaches beyond identifying people and organizations. It also covers physical objects, products, data, digital resources, applications, software, services, digital assets, intellectual property rights, events, transactions, interactions, and physical or virtual spaces.
That breadth creates a cross-functional readiness challenge. Identity owners, privacy teams, cybersecurity teams, AI governance leads, service operators, and vendor managers may need a shared view of identifiers, lifecycle events, authentication decisions, evidence, incidents, and provider dependencies.
ComplianceOne keeps this work in a draft-readiness track. Teams can prepare and review evidence while preserving the distinction between consultation proposals and requirements that are legally in force.
How ComplianceOne Supports Draft Readiness
Teams can build an electronic identity inventory covering each proposed object category, assign accountable owners, and connect identifiers to lifecycle, source, assurance, and linkage evidence. Records can show how an object relates to its lawful owner or manager and how a transaction relates to its participants, time, location, and context.
Authentication assessments help teams document transaction risk, the selected authentication model, the proposed assurance level, and the factors used. Privacy review can record necessity, consent, minimization, and temporary retention decisions alongside authentication evidence.
Readiness records support electronic attestations and selective disclosure, domestic and cross-border provider assessment, controlled testing, AI identity-system controls, and incident handling. Each record remains clearly marked as preparatory work based on a consultation draft.
Related duties can be linked to Vietnam's personal data protection, Data Law, Cybersecurity Law, AI Law, Electronic Transactions Law, E-Commerce Law, and Telecommunications Law without duplicating evidence or merging their legal status.
Built for Compliance Operations
ComplianceOne records the official consultation window and links readiness work to the uploaded draft and Ministry of Public Security consultation dossier.
The readiness set uses organization-created working records. It does not present government forms, final fines, a final effective date, or final administrative procedures.
Human review remains central to legal interpretation, provider decisions, evidence approval, and any future authority interaction.
Related Content
People Also Ask
No. The source is a 2026 consultation draft with no assigned law number or final effective date. ComplianceOne presents it as preparatory material until an official promulgated instrument is verified.
The proposed scope includes people and organizations as well as physical objects, data, digital resources, applications, software, services, assets, rights, events, transactions, interactions, and physical or virtual spaces.
The draft proposes three risk-based levels using combinations of knowledge, possession, and inherent-characteristic factors. Readiness assessments can record the rationale without treating the levels as final law.
Yes. It describes a self-sovereign authentication model and electronic attestations that can support subject-controlled sharing and selective disclosure, subject to the final text and implementing rules.
It structures reviews of establishment, infrastructure, security, personnel, process integrity, continuity, Vietnam presence, data storage, national-system connectivity, AI controls, and incident readiness.
Next Steps
Start a Compliance Pilot
Test identity inventory, authentication assessment, and provider-readiness workflows with your team.
Discuss Your Compliance Needs
Map the draft's proposed scope to your identity systems, providers, data, and existing Vietnam duties.
The evolution of Aesir is Aesir + 
(the Norse symbol for Necessity)"Needed in order to achieve a particular result"
♥Join the AesirX Privacy Newsletter. Stay Informed. Stay Compliant.
