Vietnam releases guiding decree for personal data protection law
( January 1, 2026, 16:19 GMT | Official Statement) -- MLex Summary: Vietnam’s government released the decree guiding the implementation of the Personal Data Protection Law late on Dec. 31, just before the law came into force on Jan. 1. Known as Decree 356, the document clarifies 16 provisions of the law and provides standardized forms for documents that companies must submit in certain circumstances. Compared with the draft released in September, it gives a more detailed description of basic personal data. While largely retaining the information required for impact assessment reports on personal data processing and cross-border transfers, the decree also requires companies to describe and explain how they obtain consent from data subjects. Companies must store proof of consent and demonstrate its legitimacy in the event of a dispute. The two-day deadline for personal data controllers and processors to respond to data subject requests is also retained. The decree took effect on Jan. 1, replacing Decree 23 from 2023 on personal data protection.The decree is attached (in Vietnamese)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
Curated case files bringing together news, analysis and source documents in a single timeline