01 PDPL
PDPL compliance for Vietnamese websites
A comprehensive guide to Vietnam's Personal Data Protection Law (Law 91/2025, Decree 356) — from cookie consent and DSAR to 72-hour breach notification.
Vietnam data-protection compliant 57 articles

Are full-page cookie walls legal under the PDPL?
Full-page cookie walls often undermine voluntary consent. PDPL requires free choice and a right to refuse. See how to design a compliant banner.
Read moreIs the PDPL in force? Yes, from 01/01/2026—what firms should do now
PDPL (Law 91/2025/QH15) effective 01/01/2026. Prepare: consent, DSAR, processing contracts, security, 72-hour reporting.
Read moreBusiness obligations under the Personal Data Protection Law
Checklist of core obligations under the 2025 Personal Data Protection Law: consent, notice, security, DSAR, breaches.
Read moreWhat are a data controller's obligations under the PDPL?
Summary of data controller obligations under the PDPL: legal basis, security, rights, records, and breach reporting.
Read morePDPL purpose limitation: use only as notified—when is further use allowed?
PDPL purpose limitation explained: when extra consent is needed, legal exceptions, plus technical steps for Vietnamese SMEs/devs.
Read moreWhat are the lawful and fair processing principles under the PDPL?
Explains lawful and fair processing under the PDPL, legal bases, violation examples, and how businesses can apply them.
Read moreWhat is the data subject’s right to be informed under the PDPL?
Learn the PDPL right to be informed: what to notify, when to do it, and how Vietnamese businesses can comply.
Read moreWhat is basic personal data? How it differs from sensitive data
Explains what basic personal data includes, examples, and how to distinguish it from sensitive data under the PDPL for Vietnamese businesses.
Read moreWhat is the scope of the Personal Data Protection Law?
Scope of the Personal Data Protection Law: data, processing, extraterritorial effect, exceptions.
Read moreWho Must Comply with the Personal Data Protection Law?
Who must comply with Vietnam's Personal Data Protection Law? Key notes for orgs and businesses in or outside Vietnam processing Vietnamese data.
Read moreWhat is the structure of the Personal Data Protection Law: 5 chapters, 39 articles?
Summary of the 5 chapters and 39 articles of Law 91/2025/QH15 to guide businesses in reading the law and preparing PDPL compliance.
Read moreWhat acts are prohibited under the Personal Data Protection Law?
Explains prohibited acts under the Personal Data Protection Law: data trading, processing without legal basis, data leaks, and how to avoid.
Read more
No account needed — set up in 5 minutes.