Asia Legal is pleased to share the latest draft of the Vietnam Law on Personal Data Protection (the “Draft“). Some notable new points include changes in the scope of application and definitions used in the draft:
1- The Draft will not regulate foreign agencies and organizations operating abroad and the processing of personal data of foreigners within the territory of Vietnam.
2- Personal data is no longer limited to “information in electronic environments,” but can also include information outside electronic environments.
3- The types of personal data considered sensitive have been redefined (e.g., for customer information of credit institutions, sensitive personal data only includes information about deposits, assets, transaction information, and information of individual guarantors).
4- The requirement for companies within the same group to independently protect personal data has been removed.
5- Detailed regulations have been added regarding cases where personal data can be processed without the consent of the data subject.
6- A penalty framework ranging from 1% to 5% of the previous year’s revenue for violating organizations/enterprises has been directly added to the Draft (exclusive of penalty for individuals).
Download the latest Draft:
