Annex
Vietnam Privacy Regulatory Requirements
This annex defines privacy requirements applicable to the processing of personal data in Vietnam under the Law on Personal Data Protection No. 91/2025/QH15 (PDPL) and Decree No. 356/2025/ND-CP, both in force from 2026-01-01, including the AI-related provisions those two instruments themselves contain. It supplements the Privacy and Data Governance Policy and the Privacy Impact and Cross-Border Transfer Procedure.
- Type
- Annex
- Version
- 1.2.4
- Date
- 2026-10-01
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material privacy, regulatory, or AI governance change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Applicable laws and regulatory authorities
- Personal data protection function (DPO equivalent)
- Impact assessments
- AI and privacy obligations
- Cross-border transfer mechanisms
- Enforcement and fines
- Limitations
Related documents
- Privacy Jurisdiction Indexprivacy
- Privacy and Data Governance Policyprivacy
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Global Regulatory Applicability Registercompliance
Next
All Documents