Vietnam recently enacted the Data Law, which will enter into force on 1 July 2025. It introduces requirements for data processing, including overseas transfer of important and core data, and data disclosure to State authorities. It also covers data-related products and services like data intermediary, data analysis and synthesis, and data exchange, with detailed regulations to be provided by the Government.

Vietnam is drafting a Personal Data Protection Law (PDPL) to provide a comprehensive legal framework for personal data protection, surpassing the current Personal Data Protection Decree (PDPD). The draft PDPL, expected to be enacted in May 2025 and effective from 1 January 2026, proposes regulations for personal data processing in specific contexts such as marketing, behavioral and targeted advertising, big data processing, AI, cloud computing, recruitment and employment monitoring, banking and finance, social networks, and media services. It also addresses specific categories of personal data, including health and insurance, location, biometrics, credit, and children's data.