01 PDPL
PDPL compliance for Vietnamese websites
A comprehensive guide to Vietnam's Personal Data Protection Law (Law 91/2025, Decree 356) — from cookie consent and DSAR to 72-hour breach notification.
Vietnam data-protection compliant 57 articles

What is personal data under Vietnamese law?
Personal data under Law 91/2025/QH15: basic vs sensitive; email, IP, cookie, biometrics, and business obligations.
Read moreSaving consent proof and consent audits: Why it matters
PDPL requires proof of valid consent. What to store, how long to retain, and how to prepare for regulator audits.
Read moreWhen Do Businesses Need to Appoint a DPO (Data Protection Officer)?
What is a DPO and when must businesses appoint one under Vietnam's PDPL? Role, responsibilities, and setups for small companies.
Read moreDoes your website really need a cookie banner? The PDPL decision tree
Not every website needs a cookie banner. The PDPL decision tree shows when consent is required and when it isn't.
Read moreHow Vietnam's PDPL differs from the EU GDPR: a complete comparison
Compare Vietnam's Personal Data Protection Law (PDPL 91/2025) with the EU GDPR: scope, legal bases, rights, transfers, penalties.
Read morePDPL Compliance for Vietnamese Websites: Comprehensive Guide 2026
Comprehensive PDPL (Law 91/2025/QH15) compliance guide for Vietnamese websites: consent, cookie, DSAR, breach, DPIA, transfers, DPO.
Read moreFrom Decree 13/2023 to Law 91/2025: What to know by 01/01/2026
Compare Decree 13/2023 and the PDPL (Law 91/2025): key changes businesses need before 01/01/2026.
Read moreHow Much Are PDPL Fines? Penalties Under Law 91/2025
A summary of penalties for violations of PDPL Law 91/2025, from administrative fines to criminal liability.
Read moreWhat E-Commerce Websites Must Do to Comply with PDPL Cookie Rules
E-commerce websites must show a cookie banner, get consent before GA4/Meta Pixel, and keep proof for 5 years under the PDPL.
Read more
No account needed — set up in 5 minutes.