01 PDPL
PDPL compliance for Vietnamese websites
A comprehensive guide to Vietnam's Personal Data Protection Law (Law 91/2025, Decree 356) — from cookie consent and DSAR to 72-hour breach notification.
Vietnam data-protection compliant 57 articles

Right to Object and Restrict Processing under the PDPL
When users may object or request restrictions under PDPL and what businesses should do.
Read moreWho has rights to a deceased person's data under the PDPL?
Who has rights to a deceased person's data under the PDPL, what businesses must do, and how to handle real-world requests.
Read moreHow to Prepare for a Ministry of Public Security PDPL Inspection
When A05 inspects PDPL compliance, what they check, and what documents, processes, and evidence SMEs should prepare.
Read moreWhat Is the Decree Guiding the Personal Data Protection Law?
The role of the decree guiding Law 91/2025, what it will detail, and what businesses should prepare before 01/01/2026.
Read moreDoes a Business Household Have to Comply with PDPL?
Do business households and online sellers have to comply with PDPL? See minimum duties, examples, and an actionable checklist.
Read moreHow Does PDPL Apply to Foreign Companies?
How PDPL applies to foreign companies handling Vietnamese users' data, when compliance is required, and what to prepare.
Read moreHow Long to Retain Personal Data Under PDPL?
PDPL does not set a fixed number of years. Learn minimization, when to delete, and accounting and tax exceptions.
Read moreHow Do Data Controllers and Processors Differ?
Distinguish controllers and processors under the PDPL, each party's duties, and a SaaS business example.
Read moreWithdraw Consent for Data Processing: What Should Businesses Do?
Explains the right to withdraw consent, what businesses must do, and effects on collected data under the PDPL.
Read moreWhat are the conditions for valid consent under the PDPL?
Learn the 4 conditions for valid PDPL consent: voluntary, specific, informed, clear, with invalid examples.
Read moreHow to choose the right legal basis for processing personal data
PDPL legal bases explained and how Vietnamese businesses should choose them, with practical examples.
Read moreWhat counts as sensitive data under the PDPL?
PDPL sensitive personal data explained: types, why higher protection, and what businesses must do when processing.
Read more
No account needed — set up in 5 minutes.