Government releases list of sensitive data that necessitates security measures to prevent breaches
In a move to bolster data security and protection, Vietnam's Prime Minister has issued Decision 20/2025/QĐ-TTg, which outlines categories of **core and critical data sets** that require extra protection. While the exact text of Decision 20/2025/QĐ-TTg is not publicly available, related government decisions and strategies around data protection and information security emphasize the importance of safeguarding essential data.
The decision classifies **core data sets** as those related to national security, socio-economic development, and key state functions. **Critical data sets** typically include personal data, state secrets, financial information, and infrastructure data that, if compromised, could affect national security or public safety.
The sectors that are part of the core data include national defense, security, cryptographic affairs, foreign relations, macroeconomics, social stability, public health, and public safety. The list includes organizational structure plans of ministries, sectors, and local authorities; personnel data of civil servants, public employees, and the armed forces; information on ethnic groups and religions; strategic natural resources such as water and rare minerals; and geospatial data and satellite imagery of critical areas.
Data related to the defense industry, as well as investment and procurement activities in the fields of security, national defense, and national reserves, are also included in the list of data requiring protection. Additionally, data on scientific and technological activities outside the scope of national defense is part of the critical data sets.
The list also includes non-public information on the activities of the Communist Party, foreign affairs of state agencies, data transferred by international organizations under treaties to which Vietnam is a signatory, and data concerning Vietnamese diplomatic missions abroad.
Any non-public information about organizations and citizens is included in this category, though classified at a lower sensitivity level compared to core data. Preliminary environmental data, financial and banking information, data concerning social insurance, health insurance, and unemployment insurance are also included.
Information in the fields of industry, strategic materials, agriculture, foreign investment, education and training, biosafety, labor, and social affairs is part of the critical data sets. The data in the fields of internal affairs, transportation, and information and communications is also part of this category.
The Ministry of Public Security has been assigned to take the lead in organizing, guiding, and supervising the enforcement of the decision nationwide. The Ministry of National Defence is assigned to guide and oversee the implementation of data protection measures concerning military, national defense, and cryptographic sectors.
To further ensure the protection of these data sets, the Government has established 17 additional types of data to form the list of 43 critical data sets. The Ministry of Public Security is also responsible for coordinating with relevant agencies to review, update, and propose amendments or additions to the lists of critical and core data when necessary.
This decision underscores Vietnam's commitment to protecting sensitive data and reinforces the government's efforts to maintain national security and public safety in the digital age. For the precise list of core and critical data sets as per Decision 20/2025/QĐ-TTg, consulting the official government publication or legal database for the document text is recommended.
[1] Source: Vietnam's Government Decision 20/2025/QĐ-TTg on Core and Critical Data Protection and related decisions in 2025.
- The Vietnam Prime Minister's Decision 20/2025/QĐ-TTg emphasizes the importance of safeguarding essential data, particularly in areas of national security, socio-economic development, and key state functions.
- The decision outlines core data sets as those related to national defense, security, cryptographic affairs, foreign relations, macroeconomics, public health, public safety, and more.
- Critical data sets typically include personal data, state secrets, financial information, infrastructure data, and other categories that could affect national security or public safety.
- The list of core data includes organizational structure plans, personnel data, information on ethnic groups and religions, strategic natural resources, and geospatial data.
- Data related to the defense industry, investment, and procurement activities in the fields of security, national defense, and national reserves are also part of the data requiring protection.
- The list of critical data also includes non-public information on the activities of the Communist Party, foreign affairs of state agencies, and data concerning Vietnamese diplomatic missions abroad.
- Preliminary environmental data, financial and banking information, data concerning social insurance, health insurance, and unemployment insurance are included in the lower sensitivity level category.
- The data in the fields of industry, strategic materials, agriculture, foreign investment, education and training, biosafety, labor, and social affairs are part of the critical data sets.
- To further strengthen data protection, the Government has established 17 additional types of data to form the list of 43 critical data sets, with the Ministry of Public Security responsible for periodic updates and revisions.
