Vietnam: Closed consultation Draft Law on Personal Data Protection including data protection regulation

On 24 November 2024, the Ministry of Public Security closed the public consultation on the Draft Law on Personal Data Protection. The draft states that organisations and individuals handling personal data must obtain clear consent from data subjects before processing their data, with special provisions for sensitive data and the personal data of children. The processing of personal data must be conducted in accordance with the principles of purpose limitation, data minimisation and accuracy. Furthermore, the draft law allows organisations to utilise personal data for the development of self-learning algorithms and automated systems, such as artificial intelligence (AI). The processing of personal data by automated means must be disclosed to data subjects, along with an explanation of the potential impact on their rights and interests. Data subjects should be afforded the option to decline the processing of their data by AI systems.