Until recently, Vietnam did not have a comprehensive privacy law. Instead, various legislation, including its Constitution, Civil Code, Law on Technology, and Cybersecurity Law, amongst many others, addressed data privacy and protection. On 17 April 2023, the Vietnamese government issued Decree No. 13/2023/ND-CP on Personal Data Protection (“PDPD”), Vietnam’s first-ever comprehensive data privacy law. The PDPD requires companies that collect, process, and transfer personal data to conduct detailed filing with the “A05” division of Vietnam’s Ministry of Public Security. The Vietnamese government is working on another comprehensive data privacy law that may supersede PDPD.
Assisted Morrison & Foerster LLP in various matters related to data privacy law and cybersecurity law, including but not limited to reviewing and advising on the International Data Processing and Transfer Agreement, advising on data collection, call recordings, and the application of a data loss prevention solution in Vietnam.
Assisted United Parcel Service, Inc. (UPS), the world’s premier package delivery company, and Eventbrite, a global platform for live experiences, with Vietnamese cybersecurity laws, providing advice on applying a personnel performance monitoring solution and implementing a workforce management tool in Vietnam.
Assisted Fujitsu Limited, a global technology and business solutions leader, in drafting the Data Processing and Transfer Agreement per Vietnam law.
Assisted at least fourteen prominent MNEs in preparing and submitting dossiers for Data Protection Impact Assessments (including privacy policies) to the Ministry of Public Security.
Michael is a Partner at Dilinh Legal with over a decade of experience in Vietnam. Prior to Dilinh Legal, Michael worked at the Vietnam offices of Tilleke & Gibbins and MBJSM…
© 2025 Dilinh Legal. All Rights Reserved.