Artificial Intelligence and Facial Recognition Policy

1. Purpose

This Policy sets out the principles for the design, deployment and use of artificial intelligence (AI) systems, in particular facial recognition technology, provided by NST.

NST is committed to developing and providing AI technology in a manner that is:

• Safe
• Transparent
• Responsible
• Compliant with the law

2. Scope of application

This Policy applies to:

• NST’s AI camera products
• Facial recognition software
• AI data processing and analysis platforms

3. AI development principles

NST applies the following principles:

3.1 Lawfulness

AI systems are designed and operated in accordance with:

• the laws of Vietnam
• regulations on personal data protection
• international principles on responsible AI

3.2 Purpose limitation

Facial recognition technology may only be used for:

• identity authentication
• access control
• ensuring security

It must not be used for:

• uncontrolled mass surveillance
• sensitive behavioural analysis
• discrimination

3.3 Data minimisation

NST designs its systems to:

• limit the collection of unnecessary data
• process data only within the scope of the purpose

3.4 Security and safety

AI data, especially biometric data, is:

Subject to access control with assigned permissions

Protected at a high level of information security

Securely encrypted in storage (Data-at-Rest) on the cloud system and in device memory, preventing the unauthorised extraction or reading of data where permission has not been granted.

Encrypted over transmission channels (Data-in-Transit) using secure communication protocols to protect the data streams transmitted between end devices and the central platform system.

4. Biometric Data

Facial recognition data is considered sensitive data.

NST:

• does not use this data for its own purposes
• does not exploit it beyond the scope of service provision
• does not sell or transfer the data

*Performing a factory reset will erase all biometric data stored locally on the devices.

5. Roles and responsibilities

5.1 Role of NST

NST acts as:

• a technology provider
• a data processor acting upon request

NST does not:

• determine the final purpose of use
• bear responsibility for use for improper purposes

5.2 Responsibilities of the customer

The customer is responsible for:

• ensuring that there is a legal basis for using facial recognition technology
• notifying the persons whose data is recorded
• ensuring valid consent (where applicable)

6. Accuracy and technological limitations

NST’s AI systems:

• are designed to achieve high accuracy
• may improve over time

However:

• absolute accuracy is not guaranteed
• deviations may occur under certain conditions (lighting, camera angle, input data)

The customer should not use the AI system as the sole basis for making decisions that have legal or serious effects.

7. Monitoring and control

NST supports:

• system logging and auditing
• access control
• activity monitoring
• complete deletion of biometric data

The customer is responsible for:

• supervising the use of the system
• ensuring that the technology is not abused

8. Restricted use cases

NST’s AI technology must not be used in the following cases:

• unlawful tracking of individuals
• surveillance of private areas
• classifying or assessing people based on sensitive characteristics

9. Compliance and audit

NST may:

• provide technical documentation
• support audits where necessary

However, the ultimate responsibility for legal compliance rests with the customer.

10. Limitation of liability

To the extent permitted by law, NST shall not be liable for:

• the use of AI for improper purposes
• decisions based on AI results
• consequences arising from inaccurate input data

11. Policy updates

NST has the right to amend this Policy from time to time in order to:

• conform to legal regulations
• improve technology

12. Contact information

National Security Technology Joint Stock Company (Công ty Cổ phần Công nghệ An ninh Quốc gia)

Address: No. 5 Nguyễn Thị Duệ Street, Yên Hòa Ward, Hà Nội City, Vietnam.

Website: https://nstgroup.vn/

Email: [email protected]