2. 3. Organizations and individuals collecting, processing and using personal information of another person shall have the following responsibilities: (a) To notify such person of the form, scope, place and purpose of the collection, processing and use of his or her personal information; (b) To use the collected personal information for proper purposes and to store such information only for a certain period as stipulated by law or as agreed upon by the two parties; (c) To take necessary managerial or technical measures to ensure that the personal information shall not be lost, stolen, disclosed, modified or destroyed; (d) To immediately take necessary measures upon receipt of a request for re-examination, correction or cancellation in accordance with article 22.1 of this Law; and not to supply or use relevant personal information until such information is corrected. Organizations and individuals shall be entitled to collect, process and use personal information of another person without the consent of the latter in a case where such personal information is used for the following purposes: (a) Signing, modifying or performing contracts for use of information, products or services in the network environment; (b) Pricing [or] calculating charges for use of information, products or services in the network environment; (c) Performing other obligations in accordance with law. Article 22 Storage and supply of personal information in the network environment 1. An individual shall be entitled to request any organization or individual storing his or her personal information in the network environment to check, correct or cancel such information. 2. Organizations or individuals shall not be permitted to supply personal information of another person to any third party unless otherwise stipulated by law or agreed by such person. 3. An individual shall be entitled to claim compensation for loss caused by a breach during the supply of personal information. Article 23 Establishment of websites 1. Organizations and individuals shall be entitled to establish their websites in accordance with law and shall be responsible to manage the contents and operation of their websites. 2. Any organization or individual using a Vietnamese national domain name ending in ".vn" and establishing a website shall not be required to give notification to the Ministry of Posts and Telematics. Any organization or individual not using a Vietnamese national domain name ending in ".vn" shall inform the Ministry of Posts and Telematics in the network environment of the following information: (a) Name of the organization stated in the establishment decision, operational license, business registration certificate, or licence for establishment of a representative office; or the name of the individual; © Allens Arthur Robinson - Vietnam Laws Online Database on www.vietnamlaws.com 10