PERSONAL DATA PROTECTION LAW 2025: KEY HIGHLIGHTS TO NOTE

Recently, The National Assembly approved the Personal Data Protection Law No. 91/2025/QH15, which shall come into force on January 1, 2026. This marks Vietnam’s first legal document to comprehensively govern the collection, storage, and processing of personal data, signifying a significant leap in perfecting the legal framework for privacy rights and consumer protection in the digital environment.

In this newsletter, W&A summarizes and analyzes 10 key highlights of the 2025 Personal Data Protection Law that organizations and individuals should pay special attention to:

• Clear classification between basic personal data and sensitive personal data;

• Prohibition of personal data trading;

• Enterprises required to delete, destroy personal data in certain cases related to recruitment, management, and use of employees;

• Regulations on cases of personal data transfer;

• Detailed regulations on legal liability for violations;

• Regulations on cases not required to conduct cross-border personal data transfer impact assessment;

• Establishment of specific regulations to protect data of vulnerable groups;

• Establishment of personal data protection mechanisms in specific sectors;

• Regulations on designating personal data protection personnel for enterprises;

• Reasonable transition period, facilitating support for small-sized enterprises, startups, micro-enterprises, and household businesses.

  
  

👉 Access the full newsletter here:

W&A Newsletter on Personal Data Protection Law 2025 - Key Highlights to Note (EN).pdf

Download PDF • 4.12MB

If you have questions or wish to discuss the new regulations, the W&A Consulting team is ready to support you.