01 PDPL
PDPL compliance for Vietnamese websites
A comprehensive guide to Vietnam's Personal Data Protection Law (Law 91/2025, Decree 356) — from cookie consent and DSAR to 72-hour breach notification.
Vietnam data-protection compliant 57 articles
PDPL effective timeline: What should businesses do?
From Decree 13/2023 to Law 91/2025/QH15 (01/01/2026): PDPL milestones and what businesses should prepare.
Read moreVietnam’s latest personal data law 2026: who needs to care?
Overview of Law 91/2025/QH15, effective 01/01/2026, replacing Decree 13/2023 and which businesses must prepare now.
Read moreWhat are the PDPL personal data protection principles?
Summary of PDPL principles: lawful, transparent, purpose-limited, minimal, accurate, secure.
Read moreWhat rights do data subjects have under the PDPL?
Full list of PDPL data subject rights, what they mean, and how Vietnamese businesses handle real requests.
Read moreWhat does Decree 13/2023/ND-CP say about personal data?
Decree 13/2023/ND-CP summary: key points, who must comply, and link to the Personal Data Protection Law (Law 91/2025/QH15).
Read moreDo Vietnam-only Vietnamese sites need cookie consent?
Sites serving only Vietnam may still need cookie consent if using non-essential tracking under the PDPL.
Read moreDo PDPL in-house or hire a consultant: which to choose?
Compare in-house PDPL vs consultants by cost, capability, and risk for startups, SMEs, and large enterprises.
Read moreDo we still need a cookie banner if we have a privacy policy?
Why privacy policy and cookie banner are different PDPL duties, plus practical implementation for Vietnamese sites.
Read moreDo you need to hire a lawyer to comply with the PDPL?
When SMEs can DIY and when to hire counsel to comply with the PDPL under Law 91/2025/QH15.
Read moreInternational visitors on Vietnam websites: PDPL or GDPR?
Analysis of PDPL vs GDPR when international visitors access a Vietnam website, by audience scope and real-world scenarios.
Read moreWhat happens if you skip a cookie banner under the PDPL?
Skipping a cookie banner risks losing consent evidence, PDPL noncompliance, and sanctions under guiding decrees.
Read moreDo you need a cookie banner if you only use Google Analytics?
Using Google Analytics typically still requires a cookie banner because it uses non-essential cookies and may trigger obligations under the PDPL.
Read more
No account needed — set up in 5 minutes.