Telcos May Lose IP Addresses If Police Demand Them

New Cybersecurity Legislation to Enhance Data Transparency and Security

A significant development in the realm of digital governance has emerged with the introduction of a new cybersecurity bill. This proposed legislation aims to establish stricter regulations on how telecom companies handle user data, particularly concerning IP addresses. The bill, submitted to the National Assembly Standing Committee on September 23, mandates that telecom providers must provide Internet users' IP addresses upon request by cybersecurity authorities for security and management purposes.

The initiative is part of a broader effort to strengthen the nation's digital infrastructure and ensure that law enforcement agencies have the necessary tools to combat online threats effectively. Deputy Minister of Public Security Nguyen Van Long emphasized the challenges posed by the dynamic nature of IP addresses, which frequently change between users and locations. This fluidity complicates efforts to trace and address cyber threats, making it essential for telecom companies to maintain accurate records and be prepared to share them when required.

Under the new framework, telecom companies will bear greater responsibility for managing IP data. This includes not only storing and protecting this information but also ensuring its availability to authorized entities when needed. Unlike previous practices where law enforcement had to submit requests to Internet service providers and hope for compliance, the new law seeks to streamline this process. Officials argue that the current system poses risks to sensitive investigations, as delays or refusals could hinder critical operations.

IP addresses serve as "digital street addresses," according to Long, offering crucial insights into when, where, and by whom a device was connected. This level of detail is vital for identifying and mitigating potential threats. By making it mandatory for telecom companies to provide this information, the bill aims to enhance transparency and accountability in the digital space.

In addition to addressing IP data, the bill introduces more stringent data security requirements. Organizations and agencies handling sensitive information will need to implement robust measures such as encryption, access control systems, and regular risk assessments. These steps are designed to safeguard data against breaches and unauthorized access.

The legislation also prohibits the transfer of core and critical data to third parties. This provision underscores the importance of maintaining control over sensitive information and preventing potential leaks or misuse. Furthermore, the bill acknowledges the growing risks associated with artificial intelligence, highlighting concerns about its potential use in creating fake voices or videos for malicious purposes such as blackmail and fraud.

National Assembly Chairman Tran Thanh Man has called for clearer obligations on global platforms like Google and Facebook. He stressed the need for these companies to adhere to local regulations and take responsibility for the content they host. This call for accountability reflects a broader concern about the influence of international tech giants on national security and data privacy.

As the bill moves forward, it is expected to spark discussions about the balance between security and privacy. While the proposed measures aim to enhance cybersecurity, they also raise questions about the extent to which user data should be accessible to authorities. The final version of the bill will likely require careful consideration to ensure that it protects both national interests and individual rights.