Vietnam’s personal data protection legal framework has evolved significantly in recent years to address the growing importance of data privacy and security in the digital economy. Previously governed by Decree 13/2023/ND-CP (“Decree 13“), the regime has now been elevated with the enactment of Vietnam’s first comprehensive Personal Data Protection Law (Law No. 91/2025/QH15) (the “PDPL“) and its implementing decree (Decree No. 356/2025/ND-CP) (“Decree 356“). Both instruments took effect on 1 January 2026, replacing Decree 13 as the primary legal framework for personal data protection.
Below are the questions most frequently raised by foreign enterprises operating in Vietnam regarding their compliance obligations under the personal data protection framework. The answers will help you plan your compliance strategy in 2026.
For further information, please visit DFDL.
