Law note · Vietnam
Law on Personal Data Protection, comprehensive regime
What it requires
- An app that collects, uses, or discloses the personal data of an individual in Vietnam must comply with the Law on Personal Data Protection, Law No. 91/2025/QH15, in force since 1 January 2026.
When LexLint raises it
crawls_webtrains_modelsgenerates_contentdeploys_chatbotautomated_outreachhigh_risk_decisionsprocesses_voiceprocesses_biometrics
What we found
The Law on Personal Data Protection (Law No. 91/2025/QH15) is Vietnam's first standalone, comprehensive personal-data statute, replacing Decree 13/2023/ND-CP, which was itself Vietnam's first general personal-data instrument but only a government decree rather than a National Assembly law. A companion implementing decree, Decree 356/2025/ND-CP, took effect alongside the Law on the same date; it was not independently read this pass.
The Law's commencement date is confirmed via the Ministry of Public Security's own portal, a government source; the government's own signed PDF of the Law did not extract cleanly through crawler infrastructure, so the substantive article text in this document comes from a private secondary publisher's English translation (LuatVietnam) rather than the government's own text, and re-verification against a clean extraction of the primary PDF is still needed.
A derived corpus candidate citing this same enactment as Law No. 34/2025/QH15 is incorrect, per the Government Portal's own page title and the Ministry of Public Security's announcement, and is not folded into this document as the same law.
Primary source
Government Portal (chinhphu.vn) citation
substantive article text read via a private secondary translation (LuatVietnam) after the official signed PDF failed clean text extraction