Vietnam: Law on Personal Data Protection including data protection regulation was introduced to National Assembly of Vietnam

On 5 May 2025, the Law on Personal Data Protection was introduced to the National Assembly of Vietnam. The Law states that organisations and individuals handling personal data must obtain clear consent from data subjects before processing their data, with special provisions for sensitive data and the personal data of children. The processing of personal data must be conducted in accordance with the principles of purpose limitation, data minimisation and accuracy. Furthermore, the Law allows organisations to utilise personal data for the development of self-learning algorithms and automated systems, such as artificial intelligence (AI). The processing of personal data by automated means must be disclosed to data subjects, along with an explanation of the potential impact on their rights and interests. Data subjects should be afforded the option to decline the processing of their data by AI systems.