Vietnam: Law on Personal Data Protection including data protection regulation enters into force with grace period for small businesses

Law on Personal Data Protection including data protection regulation enters into force with grace period for small businesses

On 1 January 2026, the Law on Personal Data Protection enters into force. The Law states that organisations and individuals handling personal data must obtain clear consent from data subjects before processing their data, with special provisions for…

Scope

Policy Area

Data governance

Policy Instrument

Data protection regulation

Regulated Economic Activity

cross-cutting

Implementation Level

national

Government Branch

executive

Government Body

central government

Complete timeline of this policy change

Hide details

2024-09-24

in consultation

On 24 September 2024, the Ministry of Public Security opened a consultation on the Draft Law on Per…

2024-11-24

processing consultation

On 24 November 2024, the Ministry of Public Security closed the public consultation on the Draft La…

2025-05-05

under deliberation

On 5 May 2025, the Law on Personal Data Protection was introduced to the National Assembly of Vietn…

2025-06-26

adopted

On 26 June 2025, the Law on Personal Data Protection was adopted by the National Assembly of Vietna…

2026-01-01

in grace period

On 1 January 2026, the Law on Personal Data Protection enters into force. The Law states that organ…

2031-01-01

in force

On 1 January 2031, the Law on Personal Data Protection enters into force. Under Article 41 of the "…

Description

Law on Personal Data Protection including data protection regulation enters into force with grace period for small businesses

Scope

Complete timeline of this policy change