Decree No. 278/2025/NĐ-CP on mandatory data connection and sharing between agencies under the political system

DECREE

Regulations on mandatory connection and data sharing among agencies within the political system

organs under the political system

Pursuant to the Law on Government Organization No. 63/2025/QH15;

Pursuant to the Law on Digital Data No. 60/2024/QH15;

Pursuant to the Law on Electronic Transactions No. 20/2023/QH15;

The Government promulgates this Decree on regulations regarding entry, exit, and residence policies for foreigners at the International Financial Center in Vietnam.

The Government issues this Decree to regulate the activities of mandatory connection and data sharing among agencies within the political system from central to local levels and the National Data Architecture Framework, National Data Governance Framework, and Common Data Dictionary.

PART I

GENERAL PROVISIONS

Article 1. Scope of Regulation

This Decree applies to ministries, ministerial-level agencies, agencies under the Government, central agencies of political organizations, the Supreme People's Procuracy, the Supreme People's Court, the State Audit Office, the Office of the President, the Office of the National Assembly, central agencies under the Vietnam Fatherland Front, People's Committees at all levels (hereinafter referred to as ministries, central agencies, and local agencies), agencies, organizations, and individuals directly involved or related to the connection and sharing of data between databases and the National Data Architecture Framework, National Data Governance Framework, and Common Data Dictionary.

Article 2. Applicability

1. Data auditing is a systematic, independent, and objective process of evaluating data and data management operations to ensure the completeness, accuracy, timeliness, legality, security, and accessibility of data throughout its lifecycle, ensuring compliance with the National Data Architecture Framework, National Data Governance Framework, and Common Data Dictionary. 2. The Common Data Dictionary is a system of documents and technical tools that uniformly define the names, descriptions, formats, units of measurement, relationships, and usage methods of commonly used data fields among agencies and organizations within the political system to ensure effective data connection, interoperability, and sharing.

Article 3. Explanation of Terms

3. National master data is the primary data connected, shared, exploited, and used jointly among Party agencies, state agencies, the Vietnam Fatherland Front Committee, and political-social organizations.

4. Sectoral master data is the primary data connected, shared, exploited, and used within the internal scope of Party agencies, state agencies, the Vietnam Fatherland Front Committee, and political-social organizations.

5. Mandatory data connection and sharing refers to the establishment of mandatory technical connections between information systems and databases within the political system for the purpose of sharing, exploiting, and using data according to assigned permissions, regardless of individual agreements between agencies and organizations.

6. Data key (data key) is a specific set of data points that accurately identify a particular object, standardize anti-duplication mechanisms; standardized format, encryption, description, and classification; ensure scalability, integration, and interoperability; updated periodically and quality controlled according to the master data governance process.

1. Data connection and sharing must be timely, complete, and in accordance with the intended purpose; ensure safety, confidentiality, and within the scope of functions, tasks, and authorities; serve the efficient provision of public services, administration, and exploitation of data value.

2. All mandatory data connection and sharing activities must be carried out through the Data Sharing and Coordination Platform to implement monitoring, tracing, and effectiveness evaluation.

Article 4. General Principles

3. Data sharing must be conducted according to the list of mandatory databases, mandatory data items, technical standards, and mechanisms prescribed by competent authorities, ensuring uniformity, efficiency, and security across the entire system.

4. Data connection and sharing must fully comply with the National Data Architecture Framework, National Data Governance Framework, and Common Data Dictionary.

5. Database management agencies must publish information about managed data including data descriptions, data scope, data quality, managing agency, and access conditions on the network environment.

6. Data sharing between government agencies shall not affect the rights and responsibilities of related organizations and individuals, and shall not infringe upon privacy, personal secrets, family secrets except where otherwise provided by law.

7. Connected and shared data must ensure up-to-date accuracy as stipulated by law.

8. Other data connections and sharing among agencies within the political system shall be implemented in accordance with laws on data, personal data protection, and electronic transactions.

MANDATORY DATA CONNECTION AND SHARING AMONG AGENCIES WITHIN THE POLITICAL SYSTEM AND ENSURING CAPABILITY FOR DATA CONNECTION AND SHARING

8. The connection and sharing of other data among organs under the political system shall be carried out in accordance with the provisions of laws on data, personal data protection, and electronic transactions.

Chapter II

COMPULSORY CONNECTION AND SHARING OF DATA AMONG ORGANS UNDER THE POLITICAL SYSTEM AND ENSURING THE CAPABILITY TO CONNECT AND SHARE DATA READILY

Article 5. National Master Data

1. The integration, synchronization, and utilization of national master data is mandatory for agencies and organizations within the political system when building, updating, or operating databases and information systems.

2. The source of national master data is established or initiated based on the principle of a single reliable data source. A piece of data has only one single reliable source.

3. National master data is established or initiated from a key identifier code. The Minister of Public Security shall publish the list of national master data on the Common Data Dictionary System in coordination with agencies within the political system.

4. The Ministry of Public Security shall assign key identifier codes to national master data and build, manage, operate, and update the list of national master data to ensure accuracy, consistency, and technical interoperability.

Article 6. Sectoral Master Data

1. Ministries and central agencies have the responsibility to determine, announce, update their sectoral master data sets, and integrate them into the Common Data Dictionary System.

2. Sectoral master data must comply with the principles stipulated in Clause 4 of Article 5 of this Decree and possess the capability for expansion, integration, interoperability, and retrieval with national master data.

3. The Ministry of Public Security is responsible for providing technical guidance, monitoring, and supervising the construction, updating, and use of sectoral master data to ensure uniformity and the ability to integrate and retrieve data across the entire system.

Article 7. Methods of Connection, Sharing, Exploitation, and Mandatory Use of Data

1. The connection and sharing of mandatory data between databases shall be carried out uniformly and synchronously, adhering to the National Data Architecture Framework, the National Data Governance and Management Framework, and the Common Data Dictionary.

2. Methods of connecting and sharing mandatory data

a) The information system of the agency using and exploiting data connects to the information system of the agency sharing data to query data through the Data Sharing and Coordination Platform. The Data Sharing and Coordination Platform performs authentication and permission management for data exchange between both parties. (Data sharing upon request);

b) The information system of the agency sharing data synchronizes part or all of its data to the information system of the agency using and exploiting data through the Data Sharing and Coordination Platform;

c) The information system of the agency sharing data synchronizes data to the National Integrated Database through the Data Sharing and Coordination Platform to coordinate for the agency using and exploiting data;

d) Shared data is packaged and stored on information storage media.

3. The secure connection point server (Agent Node) is a component of the Data Sharing and Coordination Platform with the function of securing connection points to facilitate data exchange and sharing between databases and information systems, including:

a) Central ministries, agencies, and localities directly connect to the Data Sharing and Coordination Platform through the Agent Node located at the central ministry, agency, or locality;

b) Department-level and central agency data sharing platforms directly connect to the Data Sharing and Coordination Platform through the Agent Node located at the central ministry, agency, or locality;

c) Various forms of data connections and sharing, as well as other databases of local departments and sectors, directly connect to the Data Sharing and Coordination Platform through the Agent Node located at the department, sector, or locality;

d) The Agent Node connects to the Data Sharing and Coordination Platform located at the department, sector, or locality set up, configured, and installed by the National Data Center.

Article 8. List of mandatory connected and shared databases

1. National databases must be connected, synchronized, shared, and utilized within the political system in accordance with laws on data, personal data protection, and other relevant laws.

2. National databases and key specialized databases prioritized for implementation in Appendix I must be connected, synchronized, and shared to serve the exploitation and use of common data.

3. Databases belonging to agencies within the political system must be connected and shared in accordance with the provisions set out in Appendix II issued together with this Decree.

4. The Ministry of Public Security shall update, adjust, and supplement the results of database connection and sharing into the Common Data Dictionary System.

Article 9. Mandatory Connected, Shared, Exploited, and Used Data

1. All primary data and common data from databases under central ministries, local authorities, and other data specified in Clause 1 of Article 34 of the Law on Data must be connected, shared, and synchronized with the National Integrated Database for the Ministry of Public Security to coordinate for central ministries, local authorities through the Data Sharing and Coordination Platform.

2. Data serving administrative procedures, public services, and operational activities for central ministries, local authorities must be connected, shared, and synchronized with the National Integrated Database for the Ministry of Public Security to coordinate for central ministries, local authorities through the Data Sharing and Coordination Platform.

3. Data within the scope of state secrets must be connected and shared in accordance with laws on state secret protection and cryptographic laws.

Article 10. Ensuring Infrastructure for Connecting and Sharing Data

1. The Data Sharing and Coordination Platform shall coordinate, integrate, and control data flows between information systems throughout the political system in a digital environment, ensuring unified, smooth, secure, and efficient connections.

2. Data within the list of mandatory connections and shares must be implemented through the Data Sharing and Coordination Platform, except in cases where direct connections between two agencies require agreement with the Ministry of Public Security.

3. The connection and sharing of data must comply with legal regulations on data, personal data protection, cybersecurity, and national security, and the following provisions:

a) The manager of the information system participating in the process of connecting, sharing, exploiting, and using data is responsible for ensuring information security when data is managed, stored, processed, and transmitted on their system.

b) The agency exploiting data is responsible for ensuring information security when connecting and receiving shared data according to the regulations of the data-providing agency and relevant laws.

Article 11. Data Connection and Sharing Between Vietnam and Other Countries, International Partners

1. Data connection and sharing between Vietnam and other countries, international partners include cross-border data, serving state management requirements, implementing international treaties, bilateral and multilateral cooperation agreements, and sustainable development goals.

2. Cross-border data sharing must meet the following principles:

a) Compliance with laws on data, cybersecurity, and national sovereignty protection;

b) Ensuring access control, usage rights, logging, and security throughout the entire sharing process.

3. Central ministries, local authorities when implementing cross-border data connections and sharing must update the results on the Common Data Dictionary System; in cases of transferring and processing core data, important data, they must follow the regulations of the Law on Data.

Article 12. Connection and Sharing of Data within Ministries, Central Agencies, and Local Authorities

1. The head of ministries, central agencies, and local authorities shall be responsible for directing the management, connection, and sharing of data within their jurisdiction in accordance with the guidelines of the Ministry of Public Security to ensure compliance with the National Data Architecture Framework, National Data Governance and Management Framework, and Common Data Dictionary.

2. Specialized units for digital transformation and information technology of ministries, central agencies, and local authorities shall be responsible for:

a) Providing guidance on the management, connection, and sharing of data within their jurisdiction;

b) Monitoring, urging, evaluating, and inspecting the connection and sharing of data between agencies and units within their internal system, advising the head to resolve difficulties and issues related to management, connection, and sharing of data;

c) Reporting results on the national data management system established by the Ministry of Public Security.

Article 13. Supervision of Data Processing Activities

1. Principles of supervision of data processing activities:

a) Mandatory data connection and sharing activities among agencies within the political system must be continuously monitored, publicly disclosed, and traceable;

b) Supervision shall be carried out through technical systems and management mechanisms prescribed by competent state agencies;

c) Handling violations must be objective, transparent, within authority, and commensurate with the nature and severity of the violation.

2. The Ministry of Public Security shall be responsible for leading and coordinating with relevant agencies to conduct inspections and evaluations of compliance with connection standards, technical standards, ensuring information security, and progress in mandatory data connection, sharing, exploitation, and use; compliance with regulations on cybersecurity, information security, data laws, and personal data protection; operating technical systems to monitor data connection and sharing, except as provided in Clause 3 of this Article.

3. Party agencies, the National Assembly, the Vietnam Fatherland Front, and the Ministry of National Defense shall be responsible for supervising data connection and sharing activities within their assigned functions and tasks or coordinating with the Ministry of Public Security to implement such supervision.

4. The assessment results of the degree of data connection and sharing between databases shall serve as the basis for ranking the completion of digital transformation, administrative reform, and e-Government construction tasks of each agency, which will be periodically published and updated on the National Data Portal and sent to relevant agencies.

Article 14. Data Auditing

1. Data auditing shall be conducted to detect discrepancies, duplications, deficiencies, or technical errors in data; assess compliance with legal provisions, technical standards, and the National Data Architecture Framework; develop solutions to improve data quality and enhance data governance effectiveness.

2. Data auditing includes: Checking the completeness, accuracy, and timeliness of data; assessing the ability to share, interconnect, and reuse data; checking compliance with technical standards, specifications, and current legal provisions; evaluating access control, data protection, and backup procedures.

3. All data governance activities as stipulated in the National Data Governance and Management Framework must be audited by authorized agencies.

4. The Ministry of Public Security shall be the lead agency in conducting regular and ad hoc data audits for data of ministries, central agencies, and local authorities, excluding data under the purview of the Ministry of National Defense.

5. The results of data auditing shall be one of the criteria for evaluating the maturity level and effectiveness of data governance of each agency and organization, including compliance auditing, data quality auditing, and data governance capability auditing.

Article 15. Ranking of databases

1. The ranking of databases shall be conducted annually on a regular basis.

2. Criteria for ranking databases include:

a) The ratio of mandatory data categories that have been connected and shared in accordance with regulations and deadlines;

b) The level of internal data usage and sharing with third parties having authority;

c) The ratio of public services using shared data, the degree of automation and reuse of data;

d) Data quality (completeness, accuracy, updating, standardization according to the Common Data Dictionary);

đ) Compliance levels with technical standards, information security, personal data protection, and data rights;

e) Technical operational efficiency and the ability to monitor and automatically alert about data sharing activities;

g) Data audit results;

h) The value of data being exploited and utilized.

3. Database classification shall be carried out based on the following three types:

a) Type A (Excellent): Meeting criteria and exceeding evaluation indicators;

b) Type B (Satisfactory): Meeting criteria and completing evaluation indicators;

c) Type C (Unsatisfactory): Not meeting criteria or not completing evaluation indicators.

4. The ranking results serve as one of the criteria for adjusting state investment plans, state budget, technical support programs, and serving inspections, audits, monitoring, and guiding the implementation of tasks related to data according to assigned functions and responsibilities.

5. Based on the ranking levels specified in Clause 3 of this Article, the performance results and achievements in commendation and awards for collectives and individuals within relevant agencies and units shall be considered and evaluated.

6. The Ministry of Public Security shall develop and promulgate a set of ranking indices for data connection and sharing; organize independent evaluations or coordinate with relevant functional agencies to evaluate data connection and sharing, and publish annual evaluation and ranking results on the National Data Portal for databases listed in Appendix I and Appendix II issued together with this Decree.

7. Ministries, central agencies, localities shall conduct evaluations of data connection and sharing based on the ranking indices for data connection and sharing issued by the Ministry of Public Security and announce the evaluation and ranking results of databases under their management, except for those databases specified in Clause 6 of this Article.

Article 16. Costs for Sharing and Using Data

1. Data sharing between databases of ministries, central agencies, and localities aimed at serving state management purposes, supervision, directive control, administrative reform, and provision of public services shall not be charged fees in any form unless otherwise provided by law.

2. In cases where data sharing is for commercial purposes or to exploit increased value, the managing agency of the data has the right to propose financial schemes and data exploitation methods in accordance with the law.

Chapter III

NATIONAL DATA ARCHITECTURE FRAMEWORK, NATIONAL DATA MANAGEMENT FRAMEWORK, COMMON DATA DICTIONARY

Article 17. National Data Architecture Framework

1. The national data architecture framework is a comprehensive system providing overall guidance on structure, stratification, technical standards, and data sharing models among national, specialized, and local databases and information systems of agencies within the political system.

2. The national data architecture framework ensures synchronized, unified, non-redundant data connection, sharing, exploitation, and utilization; supports effective integration between core data layers, specialized data, and open data; guarantees scalability, technical compatibility, data security, and safety during sharing.

3. The national data architecture framework includes:

a) An overall data layer architecture, including master data, stratified data, linked data, analytical data, and open data;

b) Modeling of data layers according to functions: storage, sharing, exploitation, and analysis of data to serve directive control and provision of public services;

c) Determining data sharing platforms, coordination, and interconnection of data between information systems and databases of ministries, central agencies, and localities with the National Data Center.

4. The national data architecture framework ensures uniformity from central to local levels, ensuring that data is exploited and utilized within a consistent, synchronized, and seamless framework across agencies within the political system.

Article 18. National Data Governance and Management Framework

1. The national data governance and management framework is a system of principles, mechanisms, processes, and organizational structures to ensure that the collection, storage, connection, sharing, exploitation, openness, and protection of national data are carried out uniformly and effectively.

2. The national data governance and management framework includes:

a) Allocation of responsibilities among subjects within the political system;

b) Data lifecycle management process;

c) Coordination, sharing, and data exploitation authorization mechanisms;

d) Technical standards, security, safety, and data protection systems;

đ) Inspection, supervision, auditing, effectiveness, safety, and quality evaluation models for data.

3. The national data governance and management framework stipulates the hierarchical and layered data governance and management model; specialized units responsible for governance and management according to the hierarchical and layered model; regulations and procedures to ensure uniformity and interoperability between central ministries, agencies, and localities.

Article 19. Common Data Dictionary

1. The common data dictionary comprises a set of definitions, data structures, semantic models, and standardization rules for data.

2. The common data dictionary system is established and updated as a technical basis for different information systems and databases to be interconnected, shared, and used synchronously; standardizing administrative information, identification codes, specialized data categories, and common data; supporting data quality control, preventing semantic conflicts, and data duplication during the connection process.

3. The common data dictionary stipulates the overall model of the data dictionary system, core data vocabulary sets by field, and data system modeling to ensure connectivity, sharing between systems and databases, and international integration.

Chapter IV

IMPLEMENTATION

Article 20. Responsibilities of the Ministry of Public Security

1. Guide mandatory data connection and sharing activities to comply with the National Data Architecture Framework, National Data Governance and Management Framework, and Common Data Dictionary.

2. Coordinate uniformly the management, connection, sharing, exploitation, and protection of data throughout the political system, ensuring synchronization, efficiency, non-duplication, and compliance with legal provisions.

3. Monitor, inspect, and handle violations in cases where data connection and sharing are not implemented or delayed as prescribed by law.

4. Lead inspections and evaluations of mandatory data connection, sharing, exploitation, and usage; laws on data connection and sharing; operation of technical monitoring systems for data connection and sharing.

5. Organize mid-term reviews, final summaries, and evaluations of annual implementation results of data connection, sharing, exploitation, and usage; propose commendations for outstanding collectives and individuals or handle violations.

Article 21. Responsibilities of Central Ministries, Agencies, and Localities

1. Lead and coordinate with the Ministry of Public Security to issue specialized data lists, open data lists, common data lists (from the design phase), data strategies, digital transformation strategies within their jurisdiction, detailed data governance and management frameworks, technical procedures for data access and extraction, and data storage.

2. Conduct reviews and complete databases under their jurisdiction as specified in Appendix II of this Decree.

3. Implement data connection and sharing with the Ministry of Public Security and related information systems as prescribed by law and guided by this Decree and other relevant legal provisions.

4. Direct subordinate units to implement synchronized connections, sharing, exploitation, and usage of data, ensuring timely progress and quality.

5. Conduct reviews of current managed public services, provided public services, and existing information systems to coordinate with the National Data Center to ensure uniform implementation.

6. Standardize data, clean up, restructure public service provision processes, connect, and exploit data based on unit needs.

7. As the manager of information systems participating in the data connection, sharing, exploitation, and usage process, they are responsible for ensuring information security and cybersecurity before and during the implementation of data connection and sharing.

8. Conduct mid-term and final summaries of data connection and sharing activities between databases under their jurisdiction and update results through the Common Data Dictionary for the Ministry of Public Security to consolidate.

Article 22. Responsibilities of the National Data Center

1. Establishing, managing, and operating the data sharing and coordination platform, providing technical support to central agencies and localities in implementing mandatory data connection and sharing.

2. Taking the lead in building and submitting to competent authorities for issuance, amendment, supplementation, and updating the National Data Architecture Framework, National Data Governance and Management Framework, and Common Data Dictionary. Building a system to manage the National Data Architecture Framework, National Data Governance and Management Framework, and Common Data Dictionary. Guiding agencies to implement appropriately at each level and field.

3. Coordinating with data management agencies to standardize, integrate, interconnect, and ensure mandatory data connection and sharing within the political system's agencies.

4. Providing technical guidance on connection, monitoring, and periodic inspection of data connection and sharing implementation; regularly and periodically updating and upgrading the Agent Node server system, the data sharing and coordination platform to ensure information security, safety, and optimize data exploitation processes.

5. Leading and coordinating with relevant agencies to conduct inspections and evaluations of compliance with connection standards, technical standards, information security assurance, and progress in mandatory data connection, sharing, exploitation, and usage; compliance with cybersecurity regulations, information security laws, and data laws for units directly connected through the data sharing and coordination platform; operating technical systems to monitor data connection and sharing.

Proposing handling measures for cases where mandatory data connection and sharing obligations are not fulfilled or inadequately fulfilled.

6. Advising the Ministry of Public Security leadership on developing and issuing the Index Ranking for Data Connection and Sharing; organizing independent assessments or coordinating with related functional agencies to assess data connection and sharing, and announcing assessment results and rankings annually on the National Data Portal.

Chapter V

IMPLEMENTING PROVISIONS

Article 23. Effectiveness of Implementation

1. This Decree takes effect from the date of issuance.

2. Decree No. 47/2020/NĐ-CP dated April 9, 2020 of the Government on the management, connection, and sharing of digital data of state agencies ceases to be effective from the date this Decree takes effect.

3. Amending Clause 1 and Clause 2 of Article 14 of Decree No. 165/2025/NĐ-CP dated June 30, 2025 of the Government detailing certain provisions and measures for the enforcement of the Law on Data as follows:

"1. The Prime Minister shall issue the National Data Governance and Management Framework to be uniformly applied to state agencies that connect and share data with the National Data Center.

2. Agencies managing databases that connect and share data with the National Data Center shall develop detailed Data Governance and Management Frameworks applicable to their managed databases, ensuring consistency with the National Data Governance and Management Framework."

Article 24. Transitional Provisions

1. Central ministries, central agencies, and localities must standardize data, promulgate specialized data directories, open data directories, and common data directories according to the National Data Architecture Framework, National Data Governance and Management Framework, and Common Data Dictionary for databases specified in Appendix I of this Decree before December 31, 2025.

2. For databases and information systems that have been standardized according to this Decree, they must implement data connection and sharing through the data sharing and coordination platform. For remaining databases and information systems, they must complete standardization according to this Decree before December 31, 2026.

3. By no later than December 31, 2026, mandatory data connection and sharing between agencies in the political system must be uniformly implemented through the data sharing and coordination platform.

Article 25. Responsibilities for Implementation

1. The Minister of Public Security is responsible for guiding, inspecting, and urging the implementation of this Decree.

2. Ministers, heads of ministerial-level agencies, heads of government-affiliated agencies, Chairpersons of provincial and centrally-administered city People's Committees within their respective functions and authorities are responsible for guiding and implementing this Decree.