New Personal Data Protection Law

The National Assembly of Vietnam has enacted the long-awaited Personal Data Protection Law (abbr "PDPL") on 26 June 2025. This law represents a significant milestone in finalising the legal framework for safeguarding the privacy and personal data in Vietnam. The PDPL is set to take effect on 1 January 2026, with the Government expected to issue guidance pertaining to certain articles of the law. During the interim period preceding the PDPL's coming into force, businesses must continue to adhere to the rules set forth in the Decree No. 13/2023/ND-CP ("PDPD").

The key highlights of the PDPL are:

• Data Protection Roles: Outsourcing is permitted, but providers must meet government-specified qualifications.