Progress

Current status
adopted
01 Jan 2026 in force
26 Jun 2025 adopted
05 May 2025 under deliberation
24 Nov 2024 processing consultation
24 Sep 2024 in consultation

Scope

Implementers
Vietnam
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
legislature
Government Body
central government
parliament
data protection authority
Implementation Level
national

Timeline of events

01 Jan 2026
in force

Law on Personal Data Protection including cybersecurity regulation enters into force

On 1 January 2026, the Law on Personal Data Protection enters into force. The Law requires organisations to implement suitable technical and organisational measures to safeguard personal data against unauthorised access, disclosure or misuse (Articl…

Source
Event type law
Action type implementation
Government branch executive
Government body central government
26 Jun 2025
adopted

Law on Personal Data Protection including cybersecurity regulation was adopted by National Assembly

On 26 June 2025, the Law on Personal Data Protection was adopted by the National Assembly of Vietnam. The Law requires organisations to implement suitable technical and organisational measures to safeguard personal data against unauthorised access, …

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament
05 May 2025
under deliberation

Law on Personal Data Protection including cybersecurity regulation was introduced to National Assembly of Vietnam

On 5 May 2025, the Law on Personal Data Protection was introduced to the National Assembly of Vietnam. The Law requires organisations to implement suitable technical and organisational measures to safeguard personal data against unauthorised access,…

Source
Event type law
Action type introduction
Government branch executive
Government body data protection authority
24 Nov 2024
processing consultation

Closed consultation Draft Law on Personal Data Protection including cybersecurity regulation

On 24 November 2024, the Ministry of Public Security closed the public consultation on the Draft Law on Personal Data Protection. The draft law requires organisations to implement suitable technical and organisational measures to safeguard personal …

Source
Event type law
Action type consultation closed
Government branch executive
Government body data protection authority
24 Sep 2024
in consultation

Opened consultation Draft Law on Personal Data Protection including cybersecurity regulation

On 24 September 2024, the Ministry of Public Security opened a consultation on the Draft Law on Personal Data Protection until 24 November 2024. The draft law requires organisations to implement suitable technical and organisational measures to safe…

Source
Event type law
Action type consultation opened
Government branch executive
Government body data protection authority