Become a Member for $9.99/month

The Vietnamese government has long been implementing a national project to digitize and store citizens’ data for administrative purposes. The scope of this data collection, however, has expanded significantly beyond basic personal information—such as details on an ID card—to encompass data on individuals’ assets, finances, opinions, preferences, habits, and even patterns of movement.

This comprehensive effort has drawn comparisons to China's model for collecting citizens' financial and credit data, raising questions about ideological alignment in matters of social governance. This close parallel inevitably invites suspicion: could China’s system of surveillance and citizen scoring one day be replicated in Việt Nam?

The government’s years-long efforts to collect citizens’ data in every conceivable aspect cannot help but provoke that lingering question. From there, many more arise: Is the massive and comprehensive control of data truly meant to serve an all-encompassing management model bordering on surveillance? If so, is such a system feasible, effective, or even desirable? What concerns does it raise, and what lessons can be drawn from foreign experiences with similar ambitious undertakings?

Collecting Citizens’ Data The government's collection of citizens’ financial, property, and income data is only one component of a much broader ambition: the drive to collect and “digitize” all citizen information.

This nationwide “digital transformation” of population data is the central objective of Project 06 , which explicitly aims to “mobilize the participation of the entire political system” and the public to fulfill this goal. The project also defines this data as a “vital national resource, centrally managed, unified, and shared across the entire political apparatus.”

To centralize this effort, the Ministry of Public Security established national data centers earlier this year, granting itself full authority to store and access all information from state agencies and social institutions. In August, the Ministry inaugurated National Data Center No. 1, which Prime Minister Phạm Minh Chính proclaimed as “the heart of the nation’s digital transformation” and is described as one of Southeast Asia's largest and most advanced facilities.

In the future, the government envisions developing the app VNeID into a “super application” capable of meeting nearly all citizens’ needs—from performing and verifying transactions to handling administrative procedures. According to Major General Hoàng Anh Tuyên, Deputy Minister of Public Security, the essence of this application is the personal electronic profile of each individual, serving as the key instrument for citizens to become true “digital citizens.”

The data feeding into these centers originates from deliberate policies designed to extract citizen information. Each policy and initiative corresponds to a specific category of information, revealing the government’s intent and envisioned uses for the data. The table below provides an overview of these actions, illustrating how datasets are classified, organized, and integrated for specific purposes.

Government Regulations/Actions

Type of Data Collected

Directive No. 07/CT-TTg , issued by the Government on March 14, 2025, expands the scope of comprehensive data collection for the Ministry of Public Security, with most procedures carried out through the VNeID application.

An aggregation of national databases across various sectors: land, finance, construction, asset/income control, administrative violations, agriculture, social security, education, civil registry, healthcare, etc.

Since April 2025, the Ministry of Public Security has officially integrated news articles and special sections from Nhân Dân (The People) Newspaper into the VNeID application."

By tracking users’ reading behavior, VNeID can monitor and analyze citizens’ news consumption habits, identify trending topics of public interest, and generate insights into broader information preferences.

Decree No. 69/2024/NĐ-CP stipulates that beginning July 1, 2025, all organizations and enterprises will be required to use electronic identification accounts via the VNeID platform** to carry out online public administrative procedures.

Information about enterprises, including details of their legal representatives, transactions, networks of partners and investors, tax declaration history, and other financial activities.

Circular No. 86/2024/TT-BTC stipulates that starting July 1, 2025, the personal identification number on the VNeID application will replace the traditional tax identification number.

Citizens’ income and assets, along with information about their dependent family members, and other related data.

Several airports have already implemented the use of the VNeID application for passenger check-in procedures. The Prime Minister has directed that, starting Dec. 1, 2025, all domestic air travelers will be required to use the VNeID app for airport check-in.

Information on travel schedules and movement history, mobility patterns, and continuously updated biometric data such as facial recognition, fingerprints, and more.

The Prime Minister recently instructed the Ministry of Public Security to integrate academic records, diplomas, and certificates into the VNeID platform. In addition, starting March 2025, all examination and enrollment procedures will also be conducted through this system.

The educational background of each citizen.

According to Decree No. 164/2025 , starting January 2026, the electronic social insurance book will carry the same legal validity as the paper version and will be integrated into the VNeID platform.

The Ministry of Public Security will be able to monitor the entire process of participation in social insurance, health insurance, and unemployment insurance for more than 93 million insured citizens, as well as their medical examination and treatment records. The police will also have access to employment history, salary changes, and other labor-related data of individual workers.

In the future, the government has set its sights on developing VNeID into a " super app " capable of meeting nearly all citizens’ needs — from executing and verifying transactions to handling administrative and civil procedures. According to Major General Hoàng Anh Tuyên, Deputy Minister of Public Security, the essence of this application is each person’s electronic profile, serving as the very means by which citizens become true "digital citizens."

A Framework Without Oversight In a recent commentary on the “Independent Day Gift” campaign, Dr. Nguyễn Đức Thành observed that although Việt Nam has established a legal framework for personal data protection, it remains incomplete and limited, lacking clear provisions on a "mechanism to regulate the State’s behavior."

This is evident in the 2023 Decree on Personal Data Protectio n, which fails to clearly define the scope of state surveillance—particularly that of the Ministry of Public Security—over personal data. Although state documents and official media repeatedly emphasize “safety and transparency,” no independent mechanism or supervisory body currently exists to serve as a counterbalance to the Ministry, the agency that wields extensive authority over this data. In the absence of such oversight, any form of overreach remains possible.

Moreover, the scope of the ministry’s power continues to expand , mirroring the rapid growth of its data-collection systems. This expansion raises growing concerns about transparency and restraint in how personal data is accessed, analyzed, and potentially manipulated—affecting not only individual citizens but also domestic organizations and businesses.

By contrast, many countries have established clear data-protection policies and independent mechanisms to limit government access. The table below outlines comparative models adopted by several nations, juxtaposed with Việt Nam’s current approach.

Việt Nam

U.S.

EU

Singapore

South Korea

Governing Body

Ministry of Public Security (MPS)

Council on Foreign Relations

European Data Protection Board (EDPB)

Personal Data Protection Act (PDPA)

Personal Information Protection Act (PIPA)

Independent Supervisory Authority

N/A

The Privacy and Civil Liberties Oversight Board (PCLOB)

Data protection authorities (DPAs) in each member state

Personal Data Protection Commission (PDPC)

Independent Personal Information Protection Commission (PIPC)

The Right To Consent To Data Sharing

Citizens are legally required to share their personal data with state authorities.

It depends on the state and the specific sector. Citizens have the right to refuse to provide their data.

With the consent freely and voluntarily given by the people.

The government must obtain the consent of the people before collecting any data. Citizens also have the full right to withdraw their consent to share their data at any time.

Citizens must be willing and voluntary in sharing their data with the government.

Oversight and Complaint Mechanisms

Citizens may file complaints directly with the Ministry of Public Security.

Citizens’ right to file complaints depends on the laws of each state. For example, in California, the California Consumer Privacy Act (CCPA) ensures citizens’ rights to lodge complaints regarding the protection of their personal data.

Citizens may file complaints directly with the Data Protection Authorities (DPAs).

Citizens have the right to file complaints directly with the PDPC, along with mediation intermediaries, to ensure the protection of their rights and interests.

Citizens may file complaints directly with the Personal Information Protection Commissions (PIPCs).

Legal Regulations

Decree No. 13/2023 on Personal Data Protection and the 2025 Personal Data Protection Law.

The United States does not have a comprehensive personal data protection law; instead, it has a patchwork of sector-specific regulations.

General Data Protection Regulation (EU) 2016/679.

Personal Data Protection Act 2012.

Personal Information Protection Act 2020.

Table: A comparative table of Việt Nam and several countries or regions regarding their mechanisms for storing citizens’ data.

Việt Nam and China’s Data Governance Many international observers and analysts have long noted that Việt Nam is pursuing a digital transformation and citizen surveillance model strikingly similar to China's.

In practice, numerous similarities exist between the two countries in their approaches to handling citizens’ data—particularly in policy planning, the development of governance models, and the administrative mechanisms tied to collecting and exploiting citizen information.

The table below highlights the collection and management of citizens’ credit data as a case study, comparing and illustrating the notable similarities in their respective governmental approaches to this matter.

Việt Nam

China

Management and Control Infrastructure

The government introduced a plan to develop a National Credit Information Center (CIC) in 2015. In fact, this center had already been established since 1995.

By early 2025, the government set up a National Data and Database Center under the Ministry of Public Security, intended to serve as an intermediary hub for storing, monitoring, and managing data across society.

At present, Việt Nam is focusing on developing AI applications and a digital government model for social governance.

The Credit Reference Center of the People’s Bank of China launched its first credit reporting system in 2006. In 2014, the Chinese Communist Party introduced the Social Credit System initiative.

In 2023, China went on to establish the National Financial Regulatory Administration (NFRA), an agency responsible for overseeing and supervising the nation’s entire financial sector.

To this day, China continues to develop AI-based systems for credit scoring and social governance, aiming to complete its national data infrastructure by 2029 and to become a global ‘AI superpower’ by 2035.”

System for Collecting and Monitoring Citizens’ Information and Behavior

The VNeID system is managed by the Ministry of Public Security.

The Cyberspace ID system is managed by the Ministry of Public Security.

Previously, China collected and managed citizens’ financial data through a variety of applications such as WeChat, Sesame Credit, Hukou, and others.

Objectives Publicly Announced In the Media

Aiming toward digital governance; combating corruption and financial crimes; and improving access to credit.

Enhancing social ‘trust’ and improving the market mechanism.

Supervising Agency

The Ministry of Public Security in coordination with the State Bank of Vietnam (SBV).

“The National Development and Reform Commission (NDRC) in coordination with the People’s Bank of China (PBOC) and the Supreme People’s Court (SPC).”

Digital Payment Control

Initial phase of linking bank accounts to the VNeID application.

Digital yuan system enabling comprehensive real-time transaction monitoring, with the ability to freeze accounts or restrict transactions.

Scope of Scoring

Primarily financial credit (at present).

All financial, economic, political, and social activities, among others.

Scoring Mechanism

Pilot testing a sandbox model that uses AI for credit scoring.

AI has been implemented to assess credit scores and analyze the behavior of individual citizens.

Level of Sanctions

Primarily financial, such as closing bank accounts, restricting financial transactions, and related measures.

Cấm đi lại, hạn chế dịch vụ công cộng, công khai danh tính người vi phạm, hạn chế cơ hội học tập, làm việc, v.v.

Legal Basis

The Project on Developing Data Applications for Population Management, Identification, and Electronic Authentication to Serve National Digital Transformation for the 2022–2025 Period, with a Vision to 2030; Decree No. 13/2023 on Personal Data Protection; and others.

Outline Plan for the Establishment of the Social Credit System (2014–2020); Personal Information Protection Law 2021; and others.

Population

101 Million

1.4 Billion

Table: A comparative table of credit control systems between Việt Nam and China—two countries that share the same political regime and have maintained close political ties for many years.

An Unlikely Safeguard Against Government Incompetence Even so, one optimistic point is visible: the scale of the Vietnamese government’s efforts to monitor citizens remains modest compared to a “ data-built empire ” like China—to borrow The Economist’s phrase.

Moreover, the instability and questionable efficiency of the digital data platforms developed by the government in recent years illustrate the limited feasibility of Việt Nam’s current approach. For instance, the VNeID app repeatedly malfunctioned as citizens attempted to link their bank accounts to receive the 100,000 đồng gift offered by the government for National Day.

A few months earlier, during the official completion of the provincial and municipal merger process, the same app suffered severe overloads —users could not log in, and in some cases, their personal information was displayed incorrectly.

Other government applications, such as VssID—which stores citizens’ social insurance and healthcare data—have also encountered misinformation errors , causing confusion. Perhaps the peak of public doubt about the government’s ability to protect and control citizens’ data came just days ago, when a cybersecurity breach exposed the national credit database at the CIC.

Inefficiency leading to errors naturally undermines public trust. Yet the erosion of trust may stem not only from doubts about competence but also from suspicions about intent—the fear that the government’s growing appetite for control reflects something deeper. Recently, Reuters once again issued a warning to businesses and investors in Việt Nam about the increasingly stringent surveillance policies enforced by the security apparatus.

As public confidence in the state wanes—and as international partners begin to question the country’s image as a trustworthy collaborator—one must ask: should the government’s policies and ambitions be seriously reconsidered? And is it not time to openly and rigorously assess the effectiveness and legitimacy of these initiatives?

Thiên Lương & Tịch Dạ wrote this article in Vietnamese and published it in Luật Khoa Magazine on Sept. 19, 2025. The Vietnamese Magazine has the copyright for the English version of this article.