(Photo: VGP)

The Law on Personal Data Protection replaces all previous related regulations and represents Vietnam’s strong commitment to privacy and citizens’ safety in the digital era, when personal information has become a valuable asset that, without adequate legal safeguards, could easily be exploited or abused.

Legalizing the rights to data

Before the Law on Personal Data Protection, Vietnam’s personal data protection regulations were largely based on administrative decrees that focused on technical and compliance requirements.

The Law on Personal Data Protection, passed by the National Assembly last June, defines personal data as a protected fundamental human right.

The law requires explicit consent before any personal data is collected. This shifts users from a passive to an active position in deciding who may use their data and under what circumstances.

In the context of growing risks of losing personal data, this provision is particularly important, establishing a solid legal foundation for protecting citizens’ privacy.

Pham Trung Thanh of the National Cybersecurity Association says the law affirms Vietnam’s commitment to place people at the center of digital transformation. “The law is a key that protects users’ privacy rights. It clearly stipulates that enterprises must obtain users’ consent before collecting data. Users even have the right to withdraw previously given consent and demand that their data be protected. The law strictly prohibits the trading of personal data.”

By clearly defining rights including the right to be informed, the right to access, the right to rectification, the right to erasure, and the right to object to unlawful data processing, the new law sets legal obligations for organizations and businesses, protects human rights in the digital environment, and enables citizens to exercise greater autonomy over their personal information.

Some people expressed their opinions:

“I have the right to delete my data and my images. I’m entitled to do that, and technology companies must have a function that allows users to do so by themselves.”

“I appreciate the adoption of the law. Recently there have been many cases of online scams and data misappropriation which could affect you and your family. I experienced it myself. This new law is very important.”

With clear provisions on prohibited acts like data trading, unlawful data use, and uncontrolled cross-border data transfers, the law establishes legal barriers to minimize violations of privacy and prevent personal data leaks.

Lawyer Nguyen Van Hau of the Ho Chi Minh City Bar Association said: “The law provides very appropriate provisions. First, it clearly stipulates prohibited acts, including the misuse of personal data and violations of others’ legitimate rights and interests. Second, the law is consistent with the Constitution, concretizing constitutional provisions on private life, personal secrets, and confidential information, which are inviolable and protected by law.”

An inevitable trend in international integration

The Law on Personal Data Protection puts Vietnam in line with other regulations on safeguarding privacy and personal data, such as the European Union’s General Data Protection Regulation, widely regarded as the world’s highest benchmark for data privacy.

Aligning national law with international regulations helps protect the rights of Vietnamese citizens and builds trust among investors and international partners, who view legal frameworks as an indicator of a transparent and secure business environment. The law also supports Vietnam’s digital economic integration and promotes the healthy development of its information technology sector.

From a human rights perspective, the Law on Personal Data Protection marks a major step forward by recognizing data autonomy as a human right in the digital era. The law raises awareness of personal data rights and lays a foundation for a fairer, safer digital society that respects individual freedoms.