On 11 December 2025, the National Assembly of Vietnam adopted the Law on Digital Transformation. Article 5(3) establishes a prohibition on unlawful collection, use, sharing, buying, selling, or exploitation of digital data. Article 4(5) establishes requirements to ensure data protection throughout the lifecycle of digital systems. Article 8(4) requires storage, backup, protection, and recovery of data in compliance with regulations on the protection of personal data. Article 16(1)(c) requires organisations to protect personal data during the operation of digital systems and digital platforms. Article 27(1) requires compliance with the law on personal data protection. Article 41(3) confirms that personal data is protected in accordance with the law on personal data protection.
Original source