Examines the potential challenges, prospective regulatory
framework and common questions and answers regarding Decree 13
Following Part I in this series of insights into Decree
13, Part 2 examines the potential challenges, the prospective
regulatory framework and common questions and answers regarding
Decree 13.
What to Expect
Anticipated Challenges
Although the PDP Decree sheds light on the direction of PD
protection in Vietnam is going in, difficulties and challenges in
terms of implementation, practice, and enforcement are anticipated.
For instance, PD processors and controllers may find the strict
consent requirements for PD processing, in some cases, limiting
their legitimate interests. Organisations and individuals may also
be confused by the broad scope of application that covers both
online and offline PD processing activities and cross-border data
transfers, especially when some new concepts are not consistent
with existing laws and regulations.