The regulatory framework for data privacy is mostly contained in
Decree No. 13/2023/ND-CP ("Decree 13").
After slightly over one year of rather lenient implementation, the
Government is now programing a significant upgrade -- to elevate it
to a superior statute in the legislative hierarchy.
On September 24, 2024, the Ministry of Public Security released
the first draft of the new Law on Personal Data Protection
("DraftLPDP") for
public comment. The Draft LPDP will be open for public feedback
until November 24, 2024--a relatively short period of time. The
draft law when enacted, will mark a significant step toward
creating a comprehensive framework for personal data
protection.
