vnlawfind

Sharing Knowledge - Inspiring Passion - Promoting Jurisprudence

Some notes on the draft Decree on administrative sanctions for violations in cybersecurity and personal data protection

Currently, the Ministry of Public Security is leading the drafting of a Decree on administrative sanctions for violations in the fields of cybersecurity and personal data protection. The Draft Decree has been developed amid increasing cybersecurity risks, incidents, attacks, and personal data infringements in Viet Nam. This article analyses some significant contents to be noted.

Some impacts of the Personal Data Protection Law from 2026

The Law on Personal Data Protection 91/2025/QH15, which will officially take effect on January 1, 2026, is a law with a broad scope of regulation, applicable to all agencies, organizations, and individuals directly involved in or related to the processing of Vietnamese citizens’ personal data. Notably, the Law supplements and tightens the responsibilities of data processing entities in several specific activities and sectors such as labor, insurance business, credit, media, and information technology.

Highlights of the Draft Decree on personal data protection

In order to create a legal framework for information collection and processing, to strengthen the protection of personal information, as well as to combat illegal personal information trading and sharing, the Ministry of Public Security has been developing the Draft Decree on personal data protection based on opinions of individuals and organizations.