Nghị định 194/2025/NĐ-CP hướng dẫn Luật Giao dịch điện tử về cơ sở dữ liệu quốc gia, kết nối và chia sẻ dữ liệu, dữ liệu mở phục vụ giao dịch điện tử của cơ quan nhà nước

DECREE

Elaborating on certain Articles of the Law on Electronic Transactions regarding the national database, data connection and sharing and open data serving electronic transactions of regulatory agencies

Pursuant to the Law on Government Organization dated February 18, 2025;

Pursuant to the Law on Electronic Transactions dated June 22, 2023;

Pursuant to the Law on Data dated November 30, 2024;

At the request of the Minister of Science and Technology;

The Government hereby promulgates a Decree elaborating on certain Articles of the Law on Electronic Transactions regarding the national database, data connection and sharing and open data serving electronic transactions of regulatory agencies.

Chapter I

...

...

...

Article 1. Adjusted scope and regulated entities

1. This Decree elaborates certain contents of the Law on Electronic Transactions at point dd clause 3 Article 40, clause 6 Article 42, clause 7 Article 43, including: The development, updating, maintenance, exploitation of the national database; the sharing of the national database with databases of other state agencies; data connection and sharing; the national enterprise architecture framework (EA framework) for digital transformation; open data and the conditions to ensure compliance with regulations on open data by regulatory agencies.

2. This Decree applies to agencies, organizations and individuals directly or indirectly participating in: The development, updating, maintenance or exploitation of the national database; data connection and sharing serving e-transactions of regulatory agencies; development and implementation of the EA framework for digital transformation; provision and exploitation of open data from regulatory agencies.

Article 2. Definitions

For the purposes of this Decree, the terms below are construed as follows:

1. “Shared database” refers to the database developed by a competent authority for the purpose of providing shared access and use for agencies and units under its management, as well as facilitating sharing with external agencies, organizations and individuals for exploitation. Shared databases used in a regulatory agency shall include national databases, databases of Ministries, central and local authorities.

2. "National database" means the shared database for one or several socio-economic sectors that is developed, updated and maintained to meet the information access and usage requirements of economic sectors and to serve public interests in accordance with the requirements and purposes specified in this Decree.

3. "Information system (IS) of a national database” means the collection of hardware, software and database management systems established for the purpose of storing, managing data, overseeing updates, maintaining and exploiting the national database.

4. “The governing body of the national database" is a ministry, ministerial agency, government agency or another agency or organization assigned to lead the development, updating, maintenance, management and exploitation of the national database.

...

...

...

6. "The unit operating the IS of the national database" is the unit or organization assigned by the governing body of the national database to operate the IS of the national database. In the case of hiring operational services from an enterprise, the enterprise operating the IS of the national database shall be the service provider.

7. “Master data" is the original data containing the core information that is used to describe a specific object serving as a basis for reference and uniformity between different databases or data sets. Master data belonging to the national database is used uniformly and consistently nationwide for reference and synchronization among the databases of ministries, central and local authorities; master data belonging to the databases of ministries, central and local authorities is utilized uniformly and consistently within the ministries, central and local authorities and is referenced and synchronized among the databases and datasets within those ministries, central and local authorities.

8. “original data” is the data generated during the operation of agencies, organizations, individuals, or collected and created from the digitization of original documents, materials and other physical forms.

9. “Reference data” is data within a database or dataset and is a copy of the master data located in another database.

10. “Database development” refers to the activities involved in establishing the database, which are defined from the moment the proposal for development is initiated until the database is formed and ready for exploitation and use.

11. “Update of database” refers to activities that ensure the information within the database accurately reflects reality.

12. “Database maintenance” refers to the activities aimed at ensuring that the established database exists, operates continuously and maintains data quality that complies with the requirements of the competent authorities.

13. “Exploitation of database” involves activities related to the extraction, processing and use of data for specific purposes.

14. “Connection” refers to activities aimed at establishing links between information systems in order to exchange and transmit data.

...

...

...

16. “Conceptual data model” or “conceptual schema” is a preliminary design diagram of the content of data, which clearly describes things of significance to an agency or organization (entity classes), the essential data fields playing the role in describing and identifying the entity classes (attributes) and the associations between those things of significance (relationships) within the database or the data scope of the agency or organization. The conceptual schema is expressed independently of the storage technology.

17. “Logical data model” or “logical schema” refers to a detailed design diagram of the entire or a part of the conceptual schema; it represents all the data fields of the things of significance within the database or data messages. The logical schema must be expressed independently of the storage technology.

18. “Physical data model” or “physical schema” refers to a detailed design diagram derived from the logical schema. It clearly represents the data structure and fields for implementation in the database management system or data messages.

19. “Metadata” refers to data that provides information describing the characteristics (attributes) of data such as content, format, quality, and other attributes to facilitate the processes of searching, accessing, managing, storing and exploiting data.

20. “Open dataset” is a dataset that contains the same metadata that is shared by agencies or organizations in accordance with open data provision regulations.

21. “Open license” is one which grants permissions and contents to be complied with when other agencies, organizations or individuals exploit and use the provided open data. It is issued by the open data-providing agency.

Chapter II

ESTABLISHING, UPDATING, MAINTAINING AND EXPLOITING NATIONAL DATABASES; SHARING NATIONAL DATABASES WITH DATABASES OF OTHER AGENCIES OF THE STATE

Article 3. Principles for the establishment, updating, maintenance and exploitation of the National Database

...

...

...

2. The Government shall perform unified management of data. The Government shall assign an agency to be the governing body of the national database to perform the management and exploitation according to its functions and responsibilities. The data generated from the specialized state management under which level of authority shall be the responsibility of that authority to update accurate and timely data into the national database.

3. Compliance with regulations on the management, connection and sharing of digital data from the national database must be carried out regularly and continuously, from the design, establishment, updating, maintenance, to the exploitation; it must be ensured that the connection between the information system of the national database and other information systems is unified; standards, technical regulations and the EA framework for digital transformation as well as relevant legal regulations must be complied.

Article 4. Master data of the national database

1. The master data must contain the entity identifier.

2. Different national databases must not contain duplicate master data except for the entity identifier.

3. When the master data in the national database changes, all reference data in other databases and datasets corresponding to this master data must also be updated accordingly.

Article 5. Approval and updating of the list of national databases

1. The proposed national database to be included in the list must meet the following requirements:

a) It must serve the purpose of national governance, or serve monitoring, analysis, research and the formulation of national development policies;

...

...

...

c) It is available to be exploited across the country, connected and shared with ministries, central authorities, local authorities and state agencies to serve state management, carry out administrative procedures, reform administration, serve the people and enterprises or meet the goals of socio-economic development.

2. National databases must be included in the list of national databases. Ministries, ministerial agencies and Governmental agencies applying for supplementation, updating or adjusting the list of national databases shall submit the proposed supplemented/updated/adjusted list to the Ministry of Public Security for consolidation and assessment. In cases of eligibility, the Ministry of Public Security shall submit the proposed updated/adjusted list for the Prime Minister's approval. The documentation describing the database proposed for supplementation, update or adjustment in the list of national databases shall include the following contents:

a) Name of the national database;

b) The objective of establishing the national database;

c) The scope of data in the national database;

d) Information on the master data of the national database;

dd) Entity and purpose of exploiting the national database;

e) Information sources developed and updated into the national database;

g) Method of sharing data from the national database.

...

...

...

4. The Ministry of Public Security shall take charge and cooperate with relevant agencies in consolidating and assessing the level of compliance with the requirements in Clause 1 and Clause 2 of this Article, ensuring consistency and no duplication in the development of data and the national database, and shall submit to the Prime Minister for consideration and approval of updates and adjustments to the list of national databases.

Article 6. Fundamental elements of a national database

1. The related parties include:

a) The governing body of the national database;

b) Unit managing and maintaining the data within the national database;

c) Unit operating the information system within the national database;

d) Parties related to the exploitation of data from the national database.

2. Related activities include:

a) Establishment of the national database;

...

...

...

c) Maintenance of the database and operation of the IS of the national database;

d) Exploitation of the database;

dd) Management of the database.

3. Related parties include:

a) Data architecture, architecture of the IS of the national database and other architectural documents;

b) Master data;

c) Databases;

d) The IS of the national database.

Article 7. Establishment of a national database

...

...

...

a) Designing the data architecture in a manner that aligns with the EA framework for digital transformation;

a) Setting up an IS of the national database to store, manage updates, maintain and exploit data, which includes the technical infrastructure, hardware, platform, software, and applications through new investments, leasing services or using available information systems, ensuring there is no duplication, overlap, or waste;

c) Collecting, standardizing and establishing data to form a database;

d) Other activities prescribed by law.

2. Collecting, standardizing and establishing data to serve the development of the national database.

Data serving the development of the national database shall be collected and established from the following:

a) The data is collected directly from operations through information systems, platforms, applications, and business software.

b) The data is exploited and shared from the other national databases;

c) The data is extracted, selected and synchronized from relevant data from specialized databases, and shared databases of ministries, central and local authorities;

...

...

...

dd) Other sources as prescribed by relevant laws.

3. Requirements for the collection, establishment and standardization of data serving the development of the national database:

a) The establishment of data in the national database requires the uniform use of in-memory codes issued by competent authorities;

b) The governing body of the national database shall not be entitled to re-collect data, reorganize the collection of data or request organizations and individuals to re-provide data that is under their management or has already been made available for sharing by another agency, except in cases where the request for data provision is for the purpose of updating or for verification and validation of data or if the data does not meet the quality requirements according to technical standards and regulations or other legal provisions.

c) Information may only be established and entered into the national database when that information has been verified for accuracy;

d) It is required to comply with regulations on data collection, establishment and standardization according to the legal provisions on the management, connection and sharing of digital data by regulatory agencies;

dd) The collection of data to establish the master data of the national database is under the responsibility of the agency according to the state management hierarchy of the sector, field, or area.

4. The construction of the national database must comply with the technical standards and regulations on the application of information technology, the regulations on investment, application of information technology, data connection and sharing, network information security, cybersecurity and related legal provisions.

5. In the event that the national database has not been established, ministries, central authorities and local authorities are permitted to collect data and incorporate it into the databases of their respective ministries, central authorities and local authorities, while also ensuring readiness for integration into the national database.

...

...

...

1. The updating of a national database shall include the following activities:

a) Supplementation of data;

b) Adjustment of data.

2. Sources for updating data within the national database include:

a) Administrative procedure results;

b) Proposed amendments of agencies, organizations and individuals;

c) Other relevant databases in case of change;

d) Other resources according to the law.

3. The master data shall be updated according to the following regulations:

...

...

...

b) In cases of updates based on the proposed amendments of agencies, organizations and individuals: If the amendments fall within the scope of handling administrative procedures, the regulatory authority of the national database shall guide the relevant agencies, organizations or individuals to carry out the corresponding administrative procedures; in cases where the update does not result from resolving administrative procedures, the update shall be conducted according to the provisions of the relevant specialized laws;

c) In cases where updates are made from the databases of ministries, central authorities or local authorities where the original data originates, the national database management and maintenance unit must implement appropriate technical measures to ensure that the master data in the national database is updated simultaneously with the original data in the databases of ministries, central and local authorities.

4. The data referring to the master data in other national databases must be updated promptly in accordance with any changes to the master data.

5. Agencies and organizations that provide updates to the national database are responsible for ensuring the accuracy of the master data at the time of updating. The governing body of the national database is responsible for any errors or changes arising during the management, storage and sharing of data.

6. The governing body of the national database is responsible for promulgating the procedures for updating master data, reference data and other data within the national database, as well as organizing and overseeing the provision of data updates into the national database.

Article 9. Maintenance of a national database

The maintenance of a national database shall include the following activities:

1. Organizing inspections, evaluations and maintaining data in the national database as prescribed.

2. Maintaining operations and running the IS of the national database.

...

...

...

Article 10. Exploitation of national databases

1. Purposes of the exploitation of a national database

a) Reduce and simplify administrative procedures, improve the quality of public services serving the public and enterprises.

b) Implement administrative reform, enhance the capacity for public governance.

c) Monitor, analyze, research and formulate national development policies.

d) Support the management, direction and administration of the competent authority.

d) Establish, standardize and synchronize the databases of ministries, central authorities, local authorities and other state agencies.

e) Provide information and data to the public and enterprises to develop the digital economy and digital society.

g) Serve the crime prevention and combat.

...

...

...

i) Serve other purposes as prescribed by relevant laws and in accordance with the directives of the competent authorities.

2. Entities eligible for exploitation of national databases

The CPV agencies, National Assembly, Government, Court, Procuracy, Fatherland Front, and political-social organizations from central to local levels, as well as organizations and individuals, may exploit national databases in accordance with the purposes of exploitation prescribed in Clause 1 of this Article.

3. Methods of exploitation of a national database

a) Exploiting the national database directly on the IS of the national database; querying and searching the national database through the national data portal, the national public service portal, the electronic information portal of the governing body of the national database, the national identification application, the electronic identification and verification platform and other means provided by the competent authorities;

b) Exploiting and utilizing the national database indirectly through the connection and sharing of data between information systems as stipulated in Clause 4 of this Article;

c) Exploiting the national database through the sending of written requests to competent authorities;

d) Exploiting the national database through other methods provided by competent authorities as per regulations.

4. Exploiting a national database indirectly through data connection or sharing

...

...

...

b) Exploiting the national database indirectly through copies of data extracted from the national database. Ministries, central authorities, local authorities and other state agencies are permitted to create copies and store data under their management in their own databases through online data connection and sharing methods by synchronizing either all or part of the data and appropriate data protection measures must be implemented. Master data that is exploited and stored for a long-term outside the national database does not possess the same legal value as the master data within the national database, unless otherwise provided by law.

c) Exploiting the national database indirectly through the National comprehensive database. The national databases shall synchronize and update data regarding the National comprehensive database. The data, once synchronized, will be provided in the form of shared data and open data for agencies, organizations and individuals to exploit in accordance with the provisions of the law.

Article 11. Regulations on the exploitation of national databases

1. The head of the governing body of a national database is responsible for issuing and directing the implementation of the regulations on the exploitation of the national database within their jurisdiction.

2. Regulations shall be developed on the basis of the following contents: Functions, tasks and organizational structure of the governing body; development goals and master data; scope and scale of data; eligible entities and purposes of exploitation; methods of sharing; current status and requirements arising during the operation of the national database.

3. Main contents of the Regulations, including: Eligible entities and purposes of exploitation; specific responsibilities, powers and obligations of each agency, organization and individual involved in the management, maintenance of data and operation of the IS of the national database; the conditions, requirements and procedures for data connection and sharing; forms of data exploitation; and sanctions for violations of the Regulations.

4. The Regulations shall not include additional requirements limiting the scope and eligible entities of the exploitation of data in comparison with regulations of law.

Article 12. Management of a national database

The management of a national database shall include the following activities:

...

...

...

2. Management of data architecture, including data infrastructure design and maintenance to ensure the data integration, quality and accessibility.

3. Management and design of data models, including determining the structures and relationships of data to serve the process of establishment and exploitation of data in the national database.

4. Data storage and operation of the IS of the national database, including ensuring safe data storage, while maintaining availability and efficiency in data exploitation.

5. Data security, including preventing unauthorized access, disclosure, leakage, exploitation; protecting personal data and complying with legal regulations on network information security and cybersecurity.

6. Management of the data integration, including connecting and synchronizing data from different sources, ensuring the ability to connect and share data between the national database and other databases and information systems of ministries, central authorities and local authorities.

7. Management of master data, including selecting appropriate technologies, tools and processes to ensure that master data in the national database is collected, updated and exploited accurately, consistently and completely.

8. Management of the data quality, including ensuring that the data is exploited accurately, completely, timely and in a manner that is suitable for exploitation requirements.

Article 13. Ensuring human resources

1. The governing body of a national database is responsible for ensuring the human resources serving the management, establishment, updating, maintenance and exploitation of the national database. In cases where on-site human resources cannot meet the requirements, experts and organizations must be hired according to the provisions of law.

...

...

...

Article 14. Ensuring funding

1. The costs of building, updating, maintaining and exploiting a national database shall comply with the provisions of law on management of investment in information technology application using state budget capital and the costs of information technology application activities using regular funds from the state budget capital and the provisions of law on other legal revenues. The cost of maintaining the national database includes the cost of maintaining the national database and the cost of maintaining information sources of the national database at the databases of ministries, central authorities and local authorities.

2. The agency managing and operating the National data center shall use funds allocated from the state budget and other funds as prescribed by law to serve the establishment, upgrading, and operation of the National data center and shared information technology infrastructure for national databases located at the National data center.

3. The governing body of the national database shall use funds allocated from the state budget, from fee and charge revenues and other funds as prescribed by law to serve the establishment, updating, management and maintenance of the database, except for funds allocated for the shared information technology infrastructure provided in Clause 2 of this Article.

4. It is required to allocate the funding from the state budget and other legal sources of revenue to invest in establishing national databases; and allocate regular funding to ensure information collection, updating and maintenance of national databases in accordance with state budget laws and public investment laws.

Article 15. Sharing a national database with the databases of other State agencies

1. Sharing a national database with the database of another State agency is a data sharing activity. In this regard, data from the national database shall be transferred to the database of another State agency in accordance with the provisions of Clause 2 of this Article.

2. National database must be shared with databases managed by other State agencies in accordance with the provisions on the exploitation of databases specified in Article 10 as well as the provisions on data connection and sharing set forth in Chapter III of this Decree.

Chapter III

...

...

...

Article 16. General principles of data sharing

1. Data within state agencies must be shared with agencies, organizations and individuals in the following cases, unless otherwise stipulated by law:

a) Data generated by a state agency may be shared back by that agency;

b) State agencies managing specific sectors or fields at the local level may share data from national databases or from databases of ministries and central authorities within their jurisdiction;

c) Shared databases at any administrative level may be shared by their affiliated units in accordance with their assigned functions and duties.

2. Except in cases stipulated in Clause 1 of this Article, shared data and open data within state agencies must, by default, be shared with other state agencies to serve state management activities within their authority upon request. In cases where data sharing is refused, a written response must be provided stating the reasons and specifying the legal basis for restricting data sharing. In case there are any difficulties in the management, connection and sharing of digital data, the procedure for handling such difficulties by state agencies shall be followed.

3. Data in the databases of state agencies shall be shared for immediate use by other state agencies or for the establishment of other databases within state agencies according to their authority; the agency requesting data sharing must specify whether it is for immediate use or for the establishment of a database when making the request. In the case of establishing a separate database, the reference data must be synchronized with the master data.

4. State agencies that are allowed to share master data in national databases, or in the databases of ministries, central and local authorities, shall not require agencies, organizations or individuals to provide equivalent information in paper form when carrying out administrative procedures or activities, except as otherwise prescribed by law. Master data in the national databases and in the databases of ministries, central and local authorities, has official usage value, equivalent to paper documents provided by competent authorities in accordance with the provisions of the Law on Electronic Transactions.

5. State agencies managing databases must publicly disclose information about the data under their management and the conditions for accessing such data online.

...

...

...

1. Forms of data sharing include:

a) Sharing data via information mediums;

b) Sharing data by allowing users to download it over a network;

c) Sharing data online automatically through the connection between the data-providing information system and the data-exploiting information system.

2. An agency, organization or individual wishing to exploit data may request a competent authority to share the data through one of the following methods:

a) Sending a written request to the agency managing the data;

b) Sending a written request to the intermediary system management authority in cases where the intermediary system management authority has been authorized by the data management authority to receive and process requests for data sharing;

c) Registering for connection through the Data sharing service management system.

3. The availability, implementation procedures, management of data connection and sharing must be in accordance with the provisions of Decree No. 47/2020/ND-CP dated April 9, 2020 of the Government on the management, connection and sharing of digital data of state agencies, relevant legal regulations and the directive and operational documents of the competent authorities.

...

...

...

1. The connection methods shall be in accordance with the provisions of Clause 3, Article 42 of the Law on Electronic Transactions and the regulations on methods of data connection and sharing in the management and sharing of digital data of state agencies.

2. In the case of sharing data from specialized databases among agencies performing state management of sectors and fields at both the central and local levels, the central governing body of the database must ensure the implementation of at least one of the following two requirements:

a) Provide adequate online data connection and sharing services to access data, ensuring that local agencies performing state management of sectors and fields can develop applications that meet the demands of state management;

b) Provide data connection and sharing online by synchronizing all or part of the databases from the central authorities to local authorities, enabling local agencies performing state management of sectors and fields to proactively exploit it.

Article 19. Models of connection serving data sharing

1. The application of connection models in accordance with the provisions of Clause 4, Article 42 of the Law on Electronic Transactions shall be carried out according to the following priority order:

a) Connecting and sharing data through intermediary systems;

b) Directly connecting data between information systems when intermediate systems are inaccessible or governing bodies of intermediate systems assess that such intermediate systems fail to satisfy requirements for data connection and sharing.

2. The determination that an intermediary system is not ready or fails to meet the requirements for data connection and sharing must be documented in writing by the agency managing the intermediary system upon request from agencies, organizations or individuals.

...

...

...

1. An intermediary system includes the platform for integration and sharing of national databases, the platform for sharing and regulation of data of the National data center, and the ministerial and provincial data connection and sharing infrastructures, which are decentralized and connected according to the EA framework for digital transformation, forming an intermediary network that facilitates data connection and sharing between information systems and databases, as stipulated below:

a) The platform for integration and sharing of national databases that facilitates the connection and sharing of data among information systems and national databases; among ministerial and provincial data connection and sharing infrastructures; and among information systems and platforms crucial to the development of e-government, digital government, digital economy, and digital society;

b) The platform for sharing and regulation of data of the National data center that facilitates the connection, integration, sharing and regulation of data between the National data center and agencies, organizations and individuals;

c) Ministerial and provincial data connection and sharing infrastructures that facilitate the connection and sharing of data between information systems and databases within the same ministerial or provincial authority, or within the same data center of a state agency. The ministerial and provincial data connection and sharing infrastructures are connected to the platform for integration and sharing of national databases to enable external connection.

2. Roles of an intermediary system:

a) Transferring data and facilitating transactions between the provider, the data operator, or among the parties involved in the transactions;

b) Integrating data and processing data;

c) Reconciling data in cases where transactions require reconciliation;

d) Producing transaction statistics;

...

...

...

e) Other necessary roles that serve the data connection and sharing of state agencies.

3. The funding for establishing services and implementing data sharing between state agencies through the intermediary system, as well as the operating costs of the intermediary system, shall be covered by the State budget and other legitimate sources of funding; any expenses arising from the establishment of services, implementation, and management of connections with organizations and individuals not belonging to state agencies shall be borne by those organizations and individuals.

Article 21. Items serving data connection and sharing under the IT application investment project using state budget funds

Items serving data connection and sharing under the IT application investment project using state budget funds in accordance with the provisions at Point b, Clause 1, Article 42 of the Law on Electronic Transactions must meet the following requirements:

1. They must be described in the basic design, including the following contents: Design of the conceptual schema of the shared database and the data messages, except in cases where the data is managed within a system complying with established standards, regulations, or technical rules explicitly specified in the basic design; list the data sharing services of the database management system; preliminary design of the subsystem for receiving, processing and managing data sharing from the database to external systems.

2. They must be described in the detailed design, including the following contents: The logical and physical schemas clearly illustrating the data structure and data fields within the database management system; the list and detailed descriptions of the data sharing services of the database management system, including input parameters and output data messages; the detailed design of the subsystem for receiving, processing and managing the data sharing from the database to external systems. In cases where the detailed design does not yet have a physical schema, the physical schema must be a product of the implementation process.

3. In cases where an information technology application investment project does not connect to or share data externally, or does not use data from external sources, the investment guideline decision must clearly state that the project's product does not involve data connection or sharing activities.

Article 22. Personnel serving data connection and sharing

1. The governing body of a database and the data exploitation agency may hire experts using the annual state budget in accordance with the provisions of the law to carry out activities such as establishing connections, processing, transforming, integrating data, and other activities related to data connection and sharing in cases where the on-site human resources are insufficient.

...

...

...

Article 23. Data exploitation costs

1. Except as otherwise provided by law, data sharing between state agencies is free of charge.

2. Organizations and individuals authorized by state agencies to exploit data are responsible for paying the fees related to the exploitation and use of information and data in accordance with the provisions of the law on fees; connection costs and actual expenses incurred to serve the purposes of printing, copying, photographing and sending information by electronic means.

3. The actual costs incurred for the purpose of printing, copying, photographing and sending information via electronic means including expenses for processing, reproducing, converting, transmitting and sharing data through intermediary systems for organizations and individuals, shall comply with the regulations on information access costs.

Article 24. EA framework for digital transformation

1. The EA framework for digital transformation includes:

a) The architecture framework of e-Government and digital Government, including the Vietnam digital government architecture frameworks and ministerial and provincial digital architecture frameworks;

b) The digital architecture framework of agencies and organizations, including the digital architecture frameworks of agencies and organizations not covered under point a of this clause.

2. Roles of digital architecture frameworks:

...

...

...

b) The ministerial and provincial digital architecture frameworks and the digital architecture frameworks of agencies and organizations serves as the foundation for implementing databases and information systems within these agencies and organizations.

3. The names of the digital architecture frameworks

a) A ministerial digital architecture framework is named according to a structure consisting of the phrase “Khung kiến trúc Chính phủ số” (“Architecture Framework of Digital Government”) followed by the name of the ministry, ministerial agency, or Government agency;

b) A provincial digital architecture framework is named according to a structure consisting of the phrase “Khung kiến trúc Chính phủ số” (“Architecture Framework of Digital Government”) followed by the name of the province or central-affiliated city;

c) The digital architecture framework of state agencies not covered in points a and b of this clause shall be named according to a structure consisting of words and phrases in the following order: “Khung kiến trúc”, the name of the agency or organization, and “số”.

4. The Minister of Science and Technology shall promulgate and update the EA framework for digital transformation and the Architecture Framework of Vietnam’s Digital Government. Ministers, heads of ministerial agencies and governmental agencies shall promulgate ministerial digital architecture frameworks. The Chairpersons of the People's Committees of provinces and central-affiliated cities shall promulgate provincial digital architecture frameworks. The heads of another State agencies shall promulgate the digital architecture frameworks of such agencies.

Article 25. Main contents of digital architecture frameworks

The ministerial and provincial digital architecture frameworks as well as the digital architecture framework of agencies and organizations, include the following main contents:

1. The items of a digital architecture framework:

...

...

...

b) Target architecture framework: Describing the objectives of architecture domains regarding data, business, applications, technology and information security that the agency or organization needs to achieve;

c) Specify the contents that need to be implemented to transition from the current architecture framework to the target architecture framework.

2. Architecture domains:

a) Data architecture: which lists and provides a general description of data categories of managed entities, arranges shared databases and the conceptual schema for data within the scope of management;

b) Business architecture; which lists and describes the categories of business operations; provides an overview of the information technology applications that will support business operations;

c) Applications architecture: Which lists and describes the categories of applications and application services of the agency or organization; describes the integration diagram of applications within the agency or organization and their integration with external applications and services;

d) Technology architecture: which provides a general description of the network infrastructure, data center infrastructure, technical infrastructure and information technology equipment necessary for deploying applications, application services, and databases;

dd) Information security architecture: which describes the options and solutions to ensure network information security and cybersecurity.

Chapter IV

...

...

...

Article 26. Open licence

1. Open data is provided in accordance with the Open licence of the data-providing agency.

2. The data-providing agency shall issue an Open licence or accept an Open licence published by another agency or organization.

3. The content of an Open licence must comply with the provisions of Clauses 2, 3, 4, 5, and 6 of Article 43 of the Law on Electronic Transactions.

4. Organizations and individuals that exploit and use open data must comply with the Open licence content specified in the metadata of the open dataset when exploiting and using it, as well as with the regulations on open data stipulated in this Decree.

Article 27. Provision of open data

1. The provided open data must ensure quality, be in an open format, be capable of transmission, reception, storage and processing by digital devices, ensure user accessibility and comply with the provisions of Clauses 2 and 3, Article 43 of the Law on Electronic Transactions.

2. The provision of open data must meet the following requirements:

a) Personal information must not be disclosed; the risks of personal information disclosure have been assessed and mitigated when open data is combined with other information;

...

...

...

c) The list of open data must be reviewed annually; in the event of any changes or updates, the content must be promptly amended and supplemented. Open data published according to the list must be updated or supplemented within 03 months from the date of publication;

d) The relevant legal regulations must be complied with.

3. Ministries, ministerial authorities, governmental authorities, the People’s Committees of provinces and central-affiliated cities shall implement the following contents:

a) Issue and implement a plan for providing open data along with a list of open data to be supplied in each phase, based on the consensus opinions of the Ministry of Public Security, the Ministry of Science and Technology, and other relevant agencies;

b) Determine the mechanism for collecting and analyzing feedback from individuals and organizations regarding the use of open data; designate focal points for receiving and handling feedback from organizations and individuals on issues related to the quality, availability, format, and compliance with legal regulations concerning open data;

c) Apply risk prevention measures during the process of building and publishing open data that directly relates to the safety of humans and affected property;

d) Implement measures to encourage organizations and individuals to exploit and use open data; receive feedback from organizations and individuals to determine priorities and conduct open data publication in accordance with needs; support organizations and individuals in contributing to and expanding open data.

Article 28. Methods of provision of open data

1. Open data is provided in the form of open datasets.

...

...

...

a) Metadata of the open dataset, complying with the open metadata standards for the data portal;

b) Open data content, contained in a downloaded data file or in data messages shared through data sharing services online.

3. Open data must be provided through at least one of the following Internet communication channels: The official electronic portal of the agency or organization; the data portal of the ministry, central authority or local authority; the national data portal; intermediary systems serving data connection and sharing as prescribed by law.

4. Agencies and organizations that provide open data are responsible for independently supplying or sending open data sets to the specialized information technology agencies of ministries, central authorities or local authorities in order to make the data available through the channels prescribed in Clause 3 of this Article.

Article 29. Ensuring costs, human resources and infrastructure for the implementation of regulations on open data

1. The costs of providing open data include activities such as preparing open data, assessing risks associated with open data, developing and maintaining an open data portal, promoting and raising awareness about open data, organizing events to encourage the use of open data, and other related activities. The costs of providing open data are covered by the state in accordance with the provisions of the law and other legitimate sources of funding.

2. The personnel responsible for implementing regulations on open data are either on-site staff or hired experts in cases where the on-site staff does not meet the requirements. The open data-providing agency is responsible for appointing a focal officer in charge of supplying open data.

3. The technical infrastructure for supplying open data shall include the National data portal and the data portals of ministries, central authorities or local authorities. The National data portal shall serve as the central point for providing open data on a nationwide scale, connecting with the data portals of ministries, central authorities, local authorities, and other agencies and organizations. The data portals of ministries, central authorities and local authorities shall provide open data under their management and connect with the National data portal.

Chapter V

...

...

...

Article 30. Responsibilities of governing bodies of national databases

1. Preside over the development and maintenance of national databases; update data within their management into national databases; ensure that the national database management systems operate continuously, stably and smoothly to meet the exploitation and use requirements of agencies, organizations and individuals in accordance with the provisions of law.

2. Fulfill the responsibility of being the governing bodies of information systems of national databases in accordance with the regulations on ensuring information system security by level. In cases where the IS of a national database is determined to be an information system important to national security, the governing body is responsible for fully fulfilling its duties in accordance with the provisions of the relevant law.

3. Assign data maintenance and management units; ensure the organization structure and personnel management; implement measures to attract, recruit, train, foster and hire experts to serve the establishment, updating, maintenance and exploitation of the national databases.

4. Ensure technical infrastructure to support data connection and sharing in accordance with regulations; carry out data connection and sharing between ISs of national databases and other information systems through intermediary systems, in line with the EA framework for digital transformation; provide data from national databases to the National data portal for use by agencies, organizations and individuals.

5. Take charge and cooperate with relevant agencies and units in ensuring cybersecurity and protecting information systems in accordance with the provisions of the law on network information security.

6. Take charge and cooperate with the Ministry of Public Security in developing plans, roadmaps and budget proposals for the implementation of transferring the ISs of national databases to the National data center.

7. Develop and promulgate technical regulations on the structure of data exchange, data connection and sharing between national databases and databases of ministries, central and local authorities; regulations on the exploitation of data from national databases.

Article 31. Responsibilities of data maintenance and management units

...

...

...

2. Perform data governance; manage and design data models; oversee data integration and interaction; manage data quality; ensure data security; manage master data within the scope of national databases.

Article 32. Responsibilities of units operating ISs of national databases

1. Operate technical infrastructure, hardware, software, platforms, applications and network systems to ensure the stable and continuous operation of ISs of national databases. In cases where the operating unit is an organization or enterprise contracted by the governing body for services, it is not permitted to hold or manage the information system administration accounts or database administration accounts.

2. Fulfill the responsibility of being units operating ISs of national databases in accordance with the regulations on ensuring information system security by level.

Article 33. Responsibilities of the Ministry of Science and Technology

1. Develop, manage, operate and maintain the Platform for integration and sharing of national databases to facilitate connections between national databases and between national databases and databases of ministries, central authorities, local authorities and other information systems; manage lists of data sharing services within state agencies.

2. Take charge and cooperate with governing bodies of national databases and relevant agencies in developing, issuing or proposing to the competent authorities for issuance general regulations, technical standards and regulations on information technology to serve the development, operation, and use of national databases.

Article 34. Responsibilities of the Ministry of Public Security

1. Compile, evaluate and propose to the Prime Minister the issuance, updating and adjustment of the list of national databases.

...

...

...

3. Coordinate with relevant agencies to identify the list of master data in databases of state agencies for synchronization with the National data center.

Article 35. Responsibilities of Ministry of Finance

Take charge and cooperate with relevant agencies in elaborating actual costs for printing, copying, photographing and sending information electronically to organizations and individuals in accordance with the provisions of the law on access to information.

Article 36. Responsibilities of ministries, ministerial agencies and government agencies managing sectors and fields

1. Develop and promulgate the list of data, technical standards and regulations for data within the scope of sectors and fields under their management.

2. Define clearly the scope of data collected by central authorities and the scope of data collected by local authorities; provide guidance for local authorities on conducting data collection to ensure data quality, as well as the readiness for data connection and sharing between central and local authorities.

Article 37. Responsibilities of ministries, ministerial authorities, governmental authorities, the People’s Committees of provinces and central-affiliated cities

1. Allocate funds to carry out data updates and organize data updating into national databases under their management in accordance with the provisions of Article 8 of this Decree.

2. Connect and share data from national databases, specialized databases, and shared databases under their management for agencies, organizations and individuals.

...

...

...

4. Propose the supplementation, updating and adjustment of the list of national databases in accordance with the provisions of Clause 2, Article 5 of this Decree, suitable for the needs of information technology application and digital transformation in each stage of the development of an electronic government, digital government, digital economy or digital society within their management.

5. Direct affiliated agencies and units to provide information, update data into national databases, and be responsible for the accuracy and integrity of the information and data updated.

6. In cases where a national database that is not yet included in the list of national databases is proposed to be used in a specialized legislative document, the proposing agency must ensure compliance with the provisions of Clause 1, Article 5 of this Decree and must obtain written approval from the Ministry of Public Security before submitting it to the competent authority.

Article 38. Rights and responsibilities of organizations and individuals

1. Exploit data from databases in accordance with the provisions of this Decree and the regulations on database exploitation.

2. Lodge complaints and denunciations in accordance with the provisions of the law when their own rights to exploit data are violated.

3. Comply with regulations regarding the establishment, management and exploitation of databases.

4. Ensure the completeness and accuracy of the data provided by themselves; promptly update and notify governing bodies of databases when there are changes or errors detected in the provided data.

Chapter VI

...

...

...

Article 39. Transitional provisions

1. Applicable regulations requiring the compliance with the Vietnam e-government architecture framework, the ministerial e-government architecture frameworks and the provincial e-government architecture frameworks must all adhere to the EA framework for digital transformation.

2. The ministerial e-government architecture frameworks and the provincial e-government architecture frameworks, once promulgated, shall continue to be applied until a new version is updated and renamed in accordance with the provisions of this Decree.

Article 40. Effects

1. This Decree comes into force as of August 19, 2025.

2. The following regulations shall be annulled:

a) Decree No. 47/2024/ND-CP;

b) Clause 4 of Article 3, Clause 2 of Article 12, Articles 17, 18, 19, 20, 21, points a and b of Clause 1 of Article 53 of Decree No. 47/2020/ND-CP.

3. Clause 3 Article 35 of Decree No. 47/2020/ND-CP shall be amended as follows: “Within 02 working days from the receipt of the request, the data-providing agency is responsible for creating a connection account and notifying the requesting agency or unit. In cases of request denial, the reason for the denial must be clearly stated.”.

...

...

...

1. The Minister of Science and Technology is responsible for guiding, inspecting and speeding up the implementation of this Decree.

2. Ministers, Heads of ministerial agencies, Heads of Governmental agencies, Chairpersons of the People's Committees of provinces and central-affiliated cities, relevant agencies, organizations and individuals are responsible for implementation of this Decree.

ON BEHALF OF GOVERNMENT OF VIETNAM
PP. PRIME MINISTER
DEPUTY PRIME MINISTER




Nguyen Chi Dung