Decree No. 13/2023/ND-CP on Personal Data Protection - Vietnam

Decree No. 13/2023/ND-CP on Personal Data Protection is Vietnam’s comprehensive personal data protection framework governing the collection, processing, storage, use, disclosure, and transfer of personal data. Effective from 1 July 2023, the Decree establishes obligations for data controllers and processors, provides individuals with rights over their personal information, regulates sensitive personal data, introduces consent and transparency requirements, and establishes rules for cross-border data transfers. The Decree represents Vietnam’s first dedicated data protection regulation and aligns with global privacy principles similar to the EU GDPR.