NATIONAL ASSEMBLY SOCIALIST REPUBLIC OF VIETNAM Law no.: 86/2015/QH13 Independence – Freedom - Happiness LAW ON NETWORK INFORMATION SECURITY Pursuant to the Constitution of the Socialist Republic of Vietnam; The National Assembly hereby promulgates the Law on Information Security. CHAPTER I GENERAL PROVISIONS Article 1. Scope This law provides regulations on network information security activities, rights and duties of agencies, organizations and individuals in securing network information security; civil cryptography; technical standards and norms of network information security; business in information security; human development for network information security; state management of network information security; Article 2. Subjects of application This law shall apply to any Vietnamese agencies organization, individual; foreign organization and individual in Vietnam who directly involves in or is related to network information security activities in Vietnam. Article 3. Definitions In this Law, the following terms shall be construed as follows: 1. Network information security means the protection of network information and information systems against any illegal access, use, disclosure, interruption, amendment or sabotage in order to ensure the integrity, confidentiality and availability of information. 2. Network is the environment where information is supplied, transmitted, collected, processed, stored and exchanged via telecommunication networks and computer networks. 3. Information system means any assembly of hardware, software and database which is purposely set up for establishment, supply, communication, collection, handling, storage and exchange of network information. 4. National important information system means an information system that any of its sabotage will result in damage particularly serious to national defense and security. 5. Information system owner means an organization or individual who has the power to directly manage its/his/her own information system. 6. Violation of network information security means an act of illegal access to, use, disclosure, interruption, amendment or sabotage of information or information system. 7. Information security incident means a failure of information or an information system with consequent impacts on its confidentiality, integrity or availability. 1

Select target paragraph3