On June 30, 2023, the Ministry of Public Security (MPS) issued a press release reminding of the entrance into force on July 1, 2023, of Decree No. 13/2023/ND-CP on the Protection of Personal Data (PDPD), following its issuance on April 17, 2023.

Scope

The PDPD highlights personal data protection responsibilities for:

• Vietnamese and foreign agencies, organizations, and individuals in Vietnam;
• Vietnamese agencies, organizations, and individuals operating abroad; and
• foreign agencies, organizations, and individuals directly participating in, or related to, personal data processing activities in Vietnam.

Obligations

The PDPD outlines obligations for organizations processing personal data, including:

• providing privacy notices;
• conducting impact assessments for the processing of personal data and when transferring personal data abroad;
• implementing organizational and technical measures and appropriate safety and security measures;
• recording and logging personal data processing;
• concluding a contract or agreement on data processing with data processors; and
• appointing personnel in charge of personal data protection when processing sensitive personal data.

You can read the press release here and the PDPD here, both only available in Vietnamese.

OneTrust DataGuidance has released a number of resources to assist with your PDPD compliance:

• Vietnam: Overview of the Personal Data Protection Decree;
• Vietnam: Exploring the Decree on the Protection of Personal Data;
• Vietnam: Data Subject Rights; and
• Vietnam: Data Protection Overview.

For further information and resources see our Vietnam homepage.