On 17 April 2023, Decree No. 13/2023/ND-CP on personal data
protection (PDPD) was officially issued by the Vietnamese
Government. The long-awaited and controversial decree is set to be
the first ever legal document with comprehensive regulations on
both personal data and its protection in Vietnam. With an exception
being the grace period of 2 years for SMEs, after 1 July 2023, the
PDPD will be applicable to all entities located in Vietnam and/or
outside Vietnam but directly con-ducting activities in relation to
the processing of personal data in Vietnam.
According to the PDPD, personal data is divided into basic
personal data and sensitive personal data. Basic personal data is
defined as name, gender, contact details, address, identification
num-bers, images etc. while sensitive data is the information
relating to the private life of one person, such as political
opinion, religion, race, sexual preference, criminal record, or
health status. It seems that the