What Are Permits for Importing Cyber Information Security Products? and How to Apply For Trading License in Civil Cryptographic Products and Services?

According to Article 48, Law on Cyber Information Security, the import licenses and permits required for Cyber information security products are regulated as following:

To import cyber information security products on the Government-prescribed list of cyber information security products subject to import permit, an enterprise shall obtain a permit for import of cyber information security products from a competent state agency.

Before importing cyber information security products, organizations and enterprises must have them certified and announced as conformable with regulations.

An organization or enterprise shall be granted a permit for import of cyber information security products when fully meeting the following conditions:

a/ Possessing a license for trading in cyber information security products;

b/ Having cyber information security products certified and announced as conformable with regulations;

c/ Ensuring that users and use purposes of cyber information security products do not harm national defense and security or social order and safety.

The Ministry of Information and Communications shall prescribe in detail the order, procedures and dossier for grant of a permit for import of cyber information security products.

How to Apply For Trading License in Civil Cryptographic Products and Services?

According to Article 32, Law on Cyber Information Security, the application of licenses for trading in civil cryptographic products and services need to follow the following:

1. An enterprise applying for a license for trading in civil cryptographic products and services shall submit a dossier of application for a license at the Government Cipher Committee.

2. A dossier of application for a license for trading in civil cryptographic products and services shall be made in two sets, each comprising:

a/ An application for a license for trading in civil cryptographic products and services;

b/ A copy of the enterprise registration certificate, investment registration certificate or another paper of equivalent validity;

c/ Copies of information confidentiality and security diplomas or certificates of managerial, administration and technical staff members;

d/ A technical plan, consisting of papers on technical characteristics and specifications of products; standards or technical regulations of products; standards and quality of services; technical measures and solutions; and product warranty and maintenance plan;

dd/ A cyber information confidentiality and security plan in the course of management and provision of civil cryptographic products and services;

e/ A business plan, indicating the scope of provision and recipients of products and services, scale and quantity of products and services, customer service networks, and technical assurance.

3. Within 30 days after receiving a complete dossier, the Government Cipher Committee shall appraise it and grant a license for trading in civil cryptographic products and services; if refusing to grant a license, it shall issue a written notice clearly stating the reason.

4. A license for trading in civil cryptographic products and services shall be valid for 10 years.

Our cyber security lawyers always follow development of laws in Vietnam to provide the client with update. Please contact ANT Lawyers for service inquiries.