On 10 December 2025, the National Assembly of Vietnam adopted the Law on Artificial Intelligence, confirming binding data protection obligations for artificial intelligence systems. Article 7(3) prohibits unlawful collection, processing, or use of data in artificial intelligence development, training, testing, and operation. Article 8(3) mandates protection of personal data, business secrets, and state secrets in the disclosure and sharing of data through the one-stop electronic portal on artificial intelligence and the national database on artificial intelligence systems. Article 12(1) requires all developers, suppliers, implementers, and users to ensure data safety and respond to incidents. Article 14(1)(b) and Article 14(2)(b) impose obligations to securely manage training, testing, and operational data and maintain confidentiality. Article 17(1) to Article 17(4) govern the creation, sharing, and exploitation of databases serving artificial intelligence in accordance with data protection and intellectual property law. Article 31(1) to Article 31(3) require confidentiality, proportionality, and secure handling of data used for state management.
Original source