Vietnam does not have a comprehensive law on personal
data protection and so personal data is not yet truly protected.
Witness the rise of online services that collect and process big
data from private sources. Protecting personal data presents a
significant challenge and is in conflict with another government
objective which is to provide national cybersecurity. Insuring
cybersecurity can conflict with the protection of individual
privacy.
The need for consolidated legislation to provide personal data
protection is well recognized. Based on Decision No. 06/QD-TTg, a
new law is planned to be issued sometime in 2024. In the interim,
the government issued Decree 13/2023/ND-CP on personal data
protection (Decree 13), which took effect on 1 July 2023.
