On 30 June 2025, the Vietnamese Government issued Decree No. 165/2025/ND-CP, detailing provisions and measures for the implementation of the Data Law (No. 60/2024/QH15). This Decree specifies that state agencies may request data from organisations and individuals, provided the request is documented, clearly stating the type, volume, frequency, and purpose of the data, along with the legal basis and intended processing activities. Data subjects must be notified of potential penalties for non-compliance. The Decree also outlines procedures for data handover, including the requirement for a transfer record and the right to request supplementary data if the provided information is incomplete. Authorities with the power to request data include ministers, heads of ministerial-level agencies, and directors of provincial-level public security departments, within their respective mandates. The Decree emphasises compliance with legal frameworks and ensures data access is limited to necessary and authorised purposes.
Original source