Frustrated person receiving unwanted stock solicitation callsMany users are fed up with spam calls (Illustration: The Anh).
Despite having no need, many users are still “tormented” by phone calls at all hours. The biggest question is: Why is their personal information so easily exposed?
Ms. Thuy Tien (Hanoi, character’s name has been changed) is a victim of this problem. She recounted, “I only registered to open an account at one company, but immediately after making a transaction, I started receiving calls from a series of other companies inviting me to participate.”
What’s more, even though Ms. Tien hasn’t made any transactions for three years, the solicitation calls haven’t stopped.
“What worries me even more is that they know my full name, and even my transaction history,” Ms. Tien said, annoyed.
In a similar situation, Mr. Trong Hung (character’s name has been changed) could not hide his irritation: “I only attended one seminar with the participation of securities companies. I don’t understand why, since then, my personal information and phone number have been continuously ‘bombarded’ with solicitation calls.”
Mr. Hung added that the nuisance didn’t stop there: “They call at all hours, during my lunch break, even late at night. I’m really tired of this.”
A reporter contacted a consultant from a securities company. The man frankly revealed: “The reason I have users’ phone numbers, names, and emails for solicitation is because the company provides them. There are data lists with thousands of contacts.”
When asked about the origin of this data, the employee admitted: “Our only job is to make calls for consultation and solicitation. I cannot know where this data comes from.”
The employee’s statement partially revealed an “underground market” for buying and selling investors’ personal data, where user information is passed around without their knowledge.
Both Mr. Hung and Ms. Tien expressed their desire for the Personal Data Protection Law, with its strict penalties, to be soon strongly enforced to “stop” the problem of information leakage and restore peace to users.
According to the Personal Data Protection Law (effective from January 1, 2026); the act of buying and selling personal data, unless otherwise provided by law; misappropriating, intentionally disclosing, or losing personal data is a violation of the law.
If violating the law on personal data protection, Article 8 stipulates that, depending on the nature, extent, and consequences of the violation, administrative penalties or criminal prosecution may apply; if damage is caused, compensation must be paid.
The maximum fine in administrative penalties for buying and selling personal data is 10 times the amount obtained from the violation.
The maximum fine in administrative penalties for an organization that violates regulations on cross-border transfer of personal data is 5% of that organization’s revenue in the immediately preceding year.
Meanwhile, the maximum fine in administrative penalties for other violations in the field of personal data protection is 3 billion VND.
