Enterprises are responsible for identifying IP addresses of internet users

The National Assembly has passed the Law on Cyber Security (amended), which will take effect from July 1, 2026.

The drafting agency of this Law has devoted a Chapter to regulating the responsibilities of agencies, organizations and individuals regarding cyber security.

In particular, the law stipulates the responsibility of service providers to comply with the provisions of the law on cyber security.

Warn about the possibility of cybersecurity in the use of services in cyberspace provided by itself and guide preventive measures for service users; develop emergency response plans to ensure network security to proactively handle weaknesses, risks and cybersecurity incidents.

When a cybersecurity incident occurs, immediately deploy an emergency response plan to ensure network security, and immediately report to the specialized cybersecurity protection force according to the provisions of this Law.

Apply technical measures and solutions to ensure network security for data processing and personal data processing activities according to the provisions of this Law, data law, personal data protection law and other relevant legal provisions.

In addition, there is a responsibility to identify the IP address of organizations and individuals using internet services; provide IP address identification information to the network security protection force to implement network security protection measures.

Coordinate implementation according to the instructions of the specialized cybersecurity protection force under the Ministry of Public Security to establish a system for connecting and connecting technical transmission lines, data transmission and meeting other necessary conditions to deploy solutions and measures to protect network security when required to serve the investigation, verification and handling of violations of the law on network security.

The law also stipulates the responsibilities of agencies, organizations and individuals using cyberspace. Typically, it is necessary to comply with the provisions of the law on cyber security.

Responsible for securing the information of registration, opening, managing and using their digital accounts. In case of using a digital account to commit a violation of the law, the owner of the digital account or the user of the digital account will be disciplined, administratively sanctioned or subject to criminal prosecution.

If there is a loss to the interests of the State, the legitimate rights and interests of organizations and individuals, compensation must be paid according to the provisions of law.

In addition, promptly provide information related to cybersecurity protection, cybersecurity threats, and cybersecurity violations to competent authorities and cybersecurity protection forces.

Implement the requirements and instructions of competent authorities in cybersecurity protection; assist and facilitate agencies, organizations and responsible people to carry out cybersecurity protection measures...

Read the original here