On 9 April 2021 the Vietnamese Ministry of Public Security closed the consultation for public comments on the second version of the personal data protection draft decree ('draft decree'). With this decree, Vietnam's government is aiming to establish a comprehensive regulation of data protection, introducing obligations to protect personal data of organizations and individuals. The draft decree defines in the first chapter the terms of "personal data" and "sensitive personal data" and stipulates the basic principles of personal data protection. Chapter two of the draft decree deals with the legal processing of data and outlines the rights of data subjects. Chapter three of the draft decree outlines the necessary protection measures for companies and persons processing data, such as for example requirements for technical measures, a registration of sensitive personal data processing, etc. Additionally, it is foreseen in the draft decree that a fine of up to VND 100 million or 5% of the total revenue of the personal data processor in Vietnam may be imposed in case of data breaches.
Original source