On September 23, 2026, the Hung Yen Provincial Police organized a conference to disseminate and provide guidance on the Law on Cybersecurity No. 116/2025/QH15, the Law on Personal Data Protection No. 91/2025/QH15, and Decree No. 356/2025/ND-CP. The conference also discussed measures to ensure data security and protect personal data in the context of digital transformation.
The conference was held at the Hung Yen Provincial Police headquarters and connected online with 104 commune- and ward-level police units. More than 1,300 participants attended the event, including representatives from state authorities, specialized agencies, banks, businesses, telecommunications companies, and police units in the province.
Updates on New Personal Data Protection Requirements
At the conference, the Law on Cybersecurity, the Law on Personal Data Protection, and Decree No. 356/2025/ND-CP were introduced in the context of new legal requirements for organizations and businesses in collecting, managing, and processing data.
Decree No. 356/2025/ND-CP was issued by the Government on December 31, 2025, and took effect on January 1, 2026. The Decree provides detailed regulations and measures for implementing the Law on Personal Data Protection.
The conference covered the scope of the regulations, principles of data protection, and the rights and obligations of data subjects. It also addressed the responsibilities of organizations and businesses when processing personal data. Other topics included sensitive personal data, cross-border data transfers, the preparation of personal data protection records and procedures, and responsibilities in the event of a data breach.
From Legal Requirements to Corporate Compliance
As part of the conference, Lawyer Luu Xuan Vinh – Founding and Managing Lawyer of Asia Legal gave a presentation on the 2025 Law on Personal Data Protection and Decree No. 356/2025/ND-CP, the current situation, and corporate compliance responsibilities.
His presentation focused on how businesses can put the new legal requirements into practice. It covered compliance mechanisms, Personal Data Processing Impact Assessments (DPIAs), legal risk management, and key issues that businesses should consider when handling customer and employee information.
To meet these requirements, businesses should review their data collection and processing activities, establish clear internal procedures and responsibilities, and assess potential legal risks arising from the management and use of personal information.
In addition to legal measures, the conference also introduced technical solutions to strengthen data protection, including data encryption, backup and recovery, monitoring data leakage risks, access management, and information system security.
Strengthening Awareness and Data Compliance Capacity
The implementation of the Law on Personal Data Protection and Decree No. 356/2025/ND-CP requires businesses not only to understand the new legal requirements but also to incorporate them into their internal processes and management systems.
The conference in Hung Yen provided an opportunity for authorities, organizations, and businesses to update their knowledge of the new regulations, identify personal data protection requirements, and consider both legal and technical measures for implementation.
Based on its experience in advising businesses on legal issues related to personal data, Asia Legal continues to monitor new regulations and support businesses in reviewing their data processing activities, identifying legal risks, and developing appropriate compliance mechanisms.
———————————————————
Asia Legal – Business Law Firm
Website: asialegal.vn
Email: info@asialegal.vn
Tele: 084 400 8484
Address: No. 23, Lot N03, Dich Vong New Urban Area, Dich Vong Street, Cau Giay Ward, Hanoi, Vietnam
