On October 26, 2026, VNPT Cyber Immunity and Asia Legal jointly organized Security Talk 03: Navigating Cybersecurity and Personal Data Protection Compliance for Businesses in an online format. The session focused on businesses’ compliance obligations under applicable laws, practical challenges in implementation, and solutions for preventing legal risks.
The session featured Mr. Đặng Quốc Bình, Lawyer and Compliance Process Specialist, Head of Process and Compliance at VNPT Cyber Immunity, and Master’s-level Lawyer Lưu Xuân Vĩnh, Founding and Managing Partner and Head of Technology, Media & Telecommunications (TMT) and International Arbitration at Asia Legal. The discussion brought together legal perspectives and practical insights into organizing and implementing compliance within businesses.
Compliance Obligations and Legal Risks for Businesses
The session examined businesses’ obligations under the 2025 Cybersecurity Law, the 2025 Law on Personal Data Protection, Decree No. 356/2025/ND-CP, and other relevant regulations. A key focus was determining the applicable requirements for the collection, processing, storage, sharing, and cross-border transfer of personal data.
Businesses need to review their data processing activities and identify the corresponding compliance requirements. Key considerations include Personal Data Processing Impact Assessment (DPIA) dossiers, personal data cross-border transfer impact assessment dossiers, and cybersecurity measures required under applicable regulations.
Failure to fulfill these obligations may expose businesses to legal risks, including administrative penalties and adverse impacts on business operations. Businesses should therefore proactively identify their applicable requirements rather than wait until a violation or incident occurs before taking action.
Challenges in Implementing Compliance Requirements
One common challenge is that data processing activities often involve multiple departments, technology systems, and third-party partners. This can complicate data flow mapping, the allocation of responsibilities, and the monitoring of processing activities.
In addition, businesses must translate legal requirements into specific documentation, internal procedures, and control measures. Without effective coordination among legal, information technology, information security, and business functions, implementation may become fragmented. Compliance documentation may also be ineffective if it does not accurately reflect the business’s actual operations.
Solutions for Preventing Legal Risks
To improve compliance effectiveness, businesses should begin by reviewing their data processing activities and identifying the relevant legal obligations. Based on this review, they can assess compliance gaps, prioritize areas requiring attention, and develop an implementation roadmap suited to their operations.
Completing the required documentation should go hand in hand with establishing internal procedures, assigning responsibilities, and implementing monitoring mechanisms. Businesses should also conduct periodic reviews when legal requirements, business models, or data processing activities change.
A proactive approach enables businesses to identify and manage risks at an early stage. Integrating legal requirements into operational processes also helps promote consistency in meeting compliance obligations.
Bridging Legal Requirements and Practical Implementation
Through Security Talk 03, VNPT Cyber Immunity and Asia Legal discussed key legal requirements, implementation challenges, and practical approaches to organizing compliance within businesses. The session highlighted the importance of combining a sound understanding of the law with appropriate implementation processes.
Asia Legal continues to support businesses in identifying legal risks and developing compliance solutions in the fields of cybersecurity, technology, and personal data protection.
———————————————————
Asia Legal – Business Law Firm
Website: asialegal.vn
Email: info@asialegal.vn
Tel: 084 400 8484
Address: No. 23, Lot N03, Dich Vong New Urban Area, Dich Vong Street, Cau Giay Ward, Hanoi, Vietnam
