How is ensuring the safety and security of consumer information regulated?

Reply:

According to Article 19, Law on Protection of Consumer Rights, ensuring the safety and security of consumer information is regulated as follows:

1. Business organizations and individuals must ensure the safety and security of consumer information that they collect, store, and use and take measures to prevent the following acts:

a) Stealing or illegally accessing information;

b) Using information illegally;

c) Unauthorized editing, updating, or destruction of information.

2. Business organizations and individuals must receive and resolve feedback, requests, and complaints from consumers related to information being illegally collected, used for the wrong purpose, and within the notified scope. .

3. In case the information system is attacked, creating a risk of loss of information safety and security of consumers, organizations, business individuals or relevant information storage parties must notify the relevant agency. Competent state management agency within 24 hours from the time of discovering that the information system has been attacked and take necessary measures to ensure the safety and security of consumer information according to regulations. provisions of law on network security, network information security, electronic transactions and other relevant laws.