VietnamLaw on Artificial Intelligence, prohibited practices
In force since .
An AI prohibited practices rule binding public and private bodies.
- How the hook was established
- express
- What makes it apply
- Place of effect
- Audit expectation
- none
What it requires
- Do not use an AI system with forged or simulated real people or events to intentionally and systematically deceive or manipulate people's perceptions or behaviour in a way that seriously harms their rights.NIST AI RMFMAP 3.3
- Do not use an AI system to exploit a vulnerable group, including children, the elderly, people with disabilities, or people with limited cognitive or civil-act capacity, in a way that causes them harm.NIST AI RMFMAP 3.3
- Do not collect, process, or use data to develop, train, test, or operate an AI system in violation of Vietnam's data, personal data protection, intellectual property, or cybersecurity law.NIST AI RMFMAP 4.1
- Do not obstruct, disable, or distort the human-oversight mechanisms this Law requires over your AI system.NIST AI RMFMAP 3.5
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
- MAP 3.5Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function.
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Logging duty
Article 7 is a closed list of prohibited acts (deceptive or manipulative use of forged or simulated content, exploiting a vulnerable group, unlawful data practices, and obstructing an AI system's required human-oversight mechanisms). A prohibition states what may not be done; nothing in Article 7 requires creating, keeping or producing a log or record.
- Kind
- None
- As of
What this law does
Article 7 bars developing, providing, deploying, or using an AI system to use forged elements or simulations of real people or events to intentionally and systematically deceive or manipulate human perceptions or behaviour where this causes serious harm, to exploit weaknesses of a vulnerable group such as children, the elderly, people with disabilities, or people with limited cognitive or civil-act capacity, or to create or disseminate fake content capable of posing a serious danger to national security, public order, or social safety.
It separately bars collecting, processing, or using data to develop, train, test, or operate an AI system in a way that contravenes Vietnam's data, personal data protection, intellectual property, or cybersecurity law, and bars obstructing, disabling, or distorting the human-oversight mechanisms the Law requires over an AI system.
When LexLint raises it
When your app profile says your app generates content with AI, processes voice recordings, processes biometric data, trains models, crawls the web or makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .