Vietnam: Ministry of Public Security opened consultation on Draft Decree to implement the Data Law (No. 2025/QH15) including provisions for government access to data

On 17 January 2025, the Ministry of Public Security initiated a consultation, scheduled to conclude on 17 March 2025, concerning a Draft Decree to implement the Data Law (No. 2025/QH15). The Data Law, which was adopted on 30 November 2024, establishes a legal framework for data governance. This framework encompasses data classification, protection, processing, and cross-border transfers. Organisations and individuals may be required to provide data to Party and State agencies or socio-political organisations upon request, with requests specifying the type of data, purpose, and legal basis. In certain cases related to national security, as outlined in the Draft Decree, the Ministry of Public Security and the Ministry of National Defence would be authorised to decrypt data without owner consent. Furthermore, the transfer of core or important data abroad is subject to government approval, and entities handling sensitive data are required to submit ongoing risk assessments.