EN
©2001-2026 Atumi & Sakai
1. Introduction Vietnam's personal data protection framework has reached a major turning point with the enactment of the Law on Personal Data Protection (No.91/2025/QH15, hereinafter referred to as the “New Law”) on June 26, 2025, and Decree No.356/2025/ND-CP (hereinafter referred to as the “New Decree”) on December 31 of the same year. Both the New Law and the New Decree came into effect on January 1, 2026. At the same time, Decree No.13/2023/ND-CP (hereinafter referred to as the “Former Decree”), which had established the basic framework for personal data protection in Vietnam, expired.
The Former Decree played an important role as Vietnam’s first direct comprehensive regulation on personal data protection. However, in practice, some of its provisions were considered ambiguous and difficult to interpret. By elevating personal data protection to the level of law enacted by the National Assembly, the new legislation is expected to enhance the clarity and effectiveness of the regulatory framework, while also ensuring consistency with the Data Law (No. 60/2024/QH15), which came into effect on July 1, 2025 .
Against this background, this paper introduces the new personal data protection framework, focusing on its key features and practical implications.
Please click here for the full newsletter.
【Contents】
1. Introduction
2. Limitation of applicability
3. Main Obligations
4. Penalties
4. Conclusion
【Related Link】
Newsletter
Vietnam