VN-PDPL-91-2025
Law No. 91/2025/QH15 on Personal Data Protection
Ministry of Public Security
🇻🇳Vietnam
Skin
Vietnam overview
Vietnam's Personal Data Protection Law is now in force
Law No. 91/2025/QH15 was passed on 26 June 2025 and took effect on 1 January 2026. Decree No. 356/2025/NĐ-CP took effect on the same date, supplies the current implementing detail and repealed Decree No. 13/2023/NĐ-CP. The Law preserves qualifying pre-2026 consents and impact-assessment dossiers under its transitional provisions.
Operational profile
The Law regulates consent, data-subject rights, deletion, children and vulnerable persons, cross-border transfers, processing and transfer impact-assessment dossiers, breach notice, data-protection personnel and sector-specific processing. The Ministry of Public Security is the central state-management body, with a specialised personal-data-protection agency.
Decree No. 330/2026/NĐ-CP, effective 19 August 2026, added the current administrative-penalty regime for cybersecurity and personal-data-protection violations.
What this means for you
Use the 2025 Law as the current baseline, not Decree 13 alone. Preserve valid legacy evidence where Article 39 permits it, and update assessment dossiers under the new six-month and event-driven rules.