01 PDPL
PDPL compliance for Vietnamese websites
A comprehensive guide to Vietnam's Personal Data Protection Law (Law 91/2025, Decree 356) — from cookie consent and DSAR to 72-hour breach notification.
Vietnam data-protection compliant 57 articles

Do small, low-traffic websites need to comply with the PDPL?
Small, low-traffic websites must still comply with the PDPL. See minimum steps, real examples, and a checklist for SMEs.
Read moreDo you need consent to use GA4 on Vietnamese websites?
GA4 on Vietnamese websites may require consent under the PDPL/Decree 13. Learn banner setup, configuration, and consent evidence.
Read moreWhat is the PDPL transparency principle for data processing?
PDPL transparency: what to disclose, plain language, right timing, with real examples.
Read moreWhat is the PDPL data minimization principle?
Understand PDPL data minimization: collect only what's needed, cut risk and cost, with shorter-form examples and practical implementation.
Read moreDoes silence count as consent under the PDPL?
Why silence isn’t consent under the PDPL, risks of default opt-out, and how to design consent correctly.
Read moreWhat liabilities do directors face for personal data violations?
Directors may face administrative, criminal, and governance liability for PDPL breaches. Details per regulations.
Read moreHow do anonymization and pseudonymization differ under the PDPL?
Anonymization vs pseudonymization under PDPL, legal impact, when data is out of scope, and a checklist for Vietnamese businesses.
Read moreUsing old data for a new purpose: when do you need fresh consent?
PDPL guide to purpose limitation: when you can reuse data for a new purpose and when you must obtain fresh consent.
Read moreYour complaint rights for PDPL personal data violations
Data subjects can complain, denounce, and seek compensation for PDPL violations. See mechanisms and contacts.
Read moreIs notice required when collecting personal data?
When notice is required, what it must include under the PDPL, and how to implement it for websites, apps, and data-collection forms.
Read moreHow first- and third-party cookies differ under the PDPL
First- vs third-party cookies under the PDPL: when consent is needed, why higher risk, and practical implementation tips.
Read moreProfiling and automated decisions/AI under the PDPL: what to do?
Learn transparency duties for profiling and automated decisions/AI under the PDPL and data subject rights in Vietnam.
Read more
No account needed — set up in 5 minutes.