The Law on Personal Data Protection 91/2025/QH15, which will officially take effect on January 1, 2026, is a law with a broad scope of regulation, applicable to all agencies, organizations, and individuals directly involved in or related to the processing of Vietnamese citizens’ personal data. The Law regulates the following notable legal issues:

(i) Supplementation of provisions on certain prohibited acts and administrative sanctions for violations of personal data protection regulations.
(ii) Addition of provisions on personal location data and biometric data, and stipulation of the responsibilities of organizations and individuals involved in processing such types of data.
(iii) Provision of transitional provisions on procedures for obtaining consent from data subjects, conducting impact assessments of personal data processing and cross-border personal data transfer.
(iv) Supplementation of provisions to tighten the responsibilities of data controllers and processors in certain specific sectors and activities, such as labor, insurance business, credit, communications, and information technology.