Regulations › Rest of world › Vietnam
PDPL
Law on Personal Data Protection (No. 91/2025/QH15)
WhenIn effect since 1 January 2026
Who enforces itMinistry of Public Security, Department of Cybersecurity and High-Tech Crime Prevention (A05)
Who it applies toOrganizations and individuals in Vietnam and foreign entities directly processing personal data of Vietnamese citizens and residents.
Tell the regulatorNotify the specialized agency (A05) within 72 hours of detecting a breach likely to cause seri…
DPO requiredMust appoint qualified data protection personnel or department, or hire a service provider
RegistrationNo controller registration
Transfers abroadTransfer impact assessment dossier must be filed with MPS within 60 days of first transfer, pl…
Request deadlineAcknowledge within 2 working days
Maximum fineUp to 5% of prior-year revenue for cross-border violations, 10x revenue for illegal data tradi…
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws