SecurePrivacy Logo

Vietnam Personal Data Protection Law

View Law Text
Maximum Fine
VND 100 million
Scope
National
Regulator
Ministry of Public Security
Status
Active

Need Help with Vietnam Personal Data Protection Law Compliance?

Get expert guidance on implementing Vietnam's data protection requirements and ensuring ongoing compliance for your organization.

Get Expert Help

Overview

Vietnam's Personal Data Protection Law establishes comprehensive requirements for the protection of personal data and individual privacy rights.

Key Facts

  • National data protection law
  • Enforced by Ministry of Public Security
  • Cross-border transfer restrictions
  • Breach notification requirements
  • Strong security measures

Key Principles

Data Protection

Core principles for protecting personal data.

Requirements

  • Lawful processing basis
  • Purpose limitation
  • Data minimization
  • Accuracy requirements
  • Storage limitations

Examples

  • Processing records
  • Purpose documentation
  • Data retention policies
  • Accuracy procedures

Cybersecurity Measures

Required cybersecurity and data protection measures.

Requirements

  • Technical safeguards
  • Organizational measures
  • Access controls
  • Encryption requirements
  • Security monitoring

Examples

  • Security protocols
  • Access policies
  • Encryption standards
  • Monitoring systems

Compliance Requirements

Data Processing Registration

Requirements for registering data processing activities.

Implementation Steps

  • Identify registrable activities
  • Prepare documentation
  • Submit registration
  • Maintain records
  • Update as needed

Required Documentation

  • Registration forms
  • Activity records
  • Processing logs
  • Update procedures
  • Maintenance records

Cross-border Transfers

Requirements for international data transfers.

Implementation Steps

  • Assess transfer basis
  • Implement safeguards
  • Obtain approvals
  • Document transfers
  • Monitor compliance

Required Documentation

  • Transfer agreements
  • Approval records
  • Safeguard documentation
  • Monitoring logs
  • Compliance reports

Breach Notification

Requirements for handling and reporting data breaches.

Implementation Steps

  • Establish procedures
  • Implement detection
  • Assess incidents
  • Report breaches
  • Document response

Required Documentation

  • Breach procedures
  • Detection systems
  • Assessment forms
  • Report templates
  • Response records

Enforcement & Penalties

Administrative Enforcement

Enforcement by the Ministry of Public Security.

Penalty Categories

Administrative Fines
Up to VND 100 million
For serious violations
Corrective Measures
Varies
Including suspension of operations

Example Cases

Data Breach Case
VND 50 million
2023 - Failure to implement security measures
Consent Violation
VND 70 million
2023 - Processing without valid consent