The Decree on the Protection of Personal Data (PDPD) reformed
Vietnam's privacy jurisprudence, representing the first
comprehensive data protection law. The PDPD was issued by the
Ministry of Public Security (MPS) in April 2023, and soon after, on
July 1, 2023, came into effect.
The PDPD regulates the legal basis of data processing of
Vietnamese nationals, which is driven by consent. The PDPD also
introduces controller and processor obligations, and data
processing principles similar to the GDPR and provides strict
requirements in relation to outbound data transfers. Interestingly,
the PDPD introduces certain novel data subject rights, including
the right to complain, denounce, and initiate lawsuits, claim
damages, and self-defense.
