Vietnam releases new draft personal-data protection decree
( September 19, 2025, 01:10 GMT | Official Statement) -- MLex Summary: Vietnam’s Ministry of Public Security has released for comment a new draft decree guiding the implementation of the personal-data protection law, which was passed in June and is expected to take effect in January 2026. The decree will apply to individuals and organizations, both domestic and international, that process personal data of Vietnamese citizens and people of Vietnamese origin living in Vietnam. It specifies 13 items that are considered “sensitive personal data,” while defining “personal data” as a broader category. It also stipulates that a data subject’s consent for data processing can be collected through five methods including writing, voice, text message and email. The draft also introduces a two-day deadline for personal-data controllers and processors to respond to data subjects' requests, specifies requirements for cross-border data transfers, and addresses personal-data protection issues in artificial intelligence systems and virtual universes (metaverse). The draft is open for public consultation until Sept. 26.The draft decree, in Vietnamese, is attached....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
Curated case files bringing together news, analysis and source documents in a single timeline