Vietnam Personal Data Protection Law
View Law TextMaximum Fine
VND 100 million
Scope
National
Regulator
Ministry of Public Security
Status
Active
Need Help with Vietnam Personal Data Protection Law Compliance?
Get expert guidance on implementing Vietnam's data protection requirements and ensuring ongoing compliance for your organization.
Get Expert HelpOverview
Vietnam's Personal Data Protection Law establishes comprehensive requirements for the protection of personal data and individual privacy rights.
Key Facts
- National data protection law
- Enforced by Ministry of Public Security
- Cross-border transfer restrictions
- Breach notification requirements
- Strong security measures
Key Principles
Data Protection
Core principles for protecting personal data.
Requirements
- Lawful processing basis
- Purpose limitation
- Data minimization
- Accuracy requirements
- Storage limitations
Examples
- Processing records
- Purpose documentation
- Data retention policies
- Accuracy procedures
Consent Requirements
Standards for obtaining and managing consent.
Requirements
- Express consent required
- Clear information provision
- Withdrawal mechanisms
- Special categories handling
- Consent records
Examples
- Consent forms
- Privacy notices
- Withdrawal processes
- Documentation systems
Cybersecurity Measures
Required cybersecurity and data protection measures.
Requirements
- Technical safeguards
- Organizational measures
- Access controls
- Encryption requirements
- Security monitoring
Examples
- Security protocols
- Access policies
- Encryption standards
- Monitoring systems
Compliance Requirements
Data Processing Registration
Requirements for registering data processing activities.
Implementation Steps
- Identify registrable activities
- Prepare documentation
- Submit registration
- Maintain records
- Update as needed
Required Documentation
- Registration forms
- Activity records
- Processing logs
- Update procedures
- Maintenance records
Cross-border Transfers
Requirements for international data transfers.
Implementation Steps
- Assess transfer basis
- Implement safeguards
- Obtain approvals
- Document transfers
- Monitor compliance
Required Documentation
- Transfer agreements
- Approval records
- Safeguard documentation
- Monitoring logs
- Compliance reports
Breach Notification
Requirements for handling and reporting data breaches.
Implementation Steps
- Establish procedures
- Implement detection
- Assess incidents
- Report breaches
- Document response
Required Documentation
- Breach procedures
- Detection systems
- Assessment forms
- Report templates
- Response records
Enforcement & Penalties
Administrative Enforcement
Enforcement by the Ministry of Public Security.
Penalty Categories
Administrative Fines
Up to VND 100 million
For serious violations
Corrective Measures
Varies
Including suspension of operations
Example Cases
Data Breach Case
VND 50 million
2023 - Failure to implement security measures
Consent Violation
VND 70 million
2023 - Processing without valid consent