Developments in Vietnam:
On April 17, 2023, the Government of Vietnam issued a
long-awaited regulation on data privacy, through Government Decree
No. 13/2023/ND-CP ("Decree 13"). Until
now, Vietnam did not have a comprehensive legislation regulating
the collection and processing of personal data. Instead, rules and
regulations on personal data protection were present in general
laws such as the Civil Code 2015 and the Law on Cyber Information
Security No. 86/2015/QH13.
Decree 13, much like the European Union's General Data
Protection Regulation ("GDPR"), incorporates the concepts
of data processor, data controller and data subject. It classifies
personal data as "basic personal data" and
"sensitive personal data" and outlines personal data
processing principles, including lawfulness, transparency, purpose
limitation, confidentiality, accountability, and storage
limitation. Similar to the GDPR, Decree 13 stipulates data
subjects' rights, including the right to be
