Compliance Colleague · Standards · Vietnam

Vietnam Personal Data Protection Law (Law No. 91/2025/QH15): cited answers and gap reviews

An AI compliance assistant for companies processing Vietnamese personal data · updated 2026-10-03

Vietnam's Personal Data Protection Law and Decree 356/2025/ND-CP took effect on 1 January 2026. Compliance Colleague covers data subject rights, cross-border transfer impact assessments, breach notification and sector-specific duties.

Try it on your own Vietnam PDPL work: one document review or two questions, free for 30 days, no card required. Start free →

What it covers

Law No. 91/2025/QH15 and Decree 356/2025/ND-CP
Data subject rights and privacy notices
Cross-border transfer impact assessments
Breach notification procedures
Sector rules for finance, AI, cloud and blockchain, and DPO qualifications

Questions you can ask

“Do we need a transfer impact assessment to send data to our US headquarters?”
“What must a Vietnam PDPL privacy notice contain?”
“Who can act as our DPO?”

Every answer cites the Vietnam PDPL requirement, article or control it rests on, so you can check it in seconds.

What you can upload for review

Your privacy notice checked against the law
A cross-border transfer assessment checked for missing elements
A breach response procedure checked for gaps

Files: PDF, Word, Excel or CSV, Visio (.vsdx), draw.io, or an image such as a screenshot. Choose a full review, a prioritized fix list (each gap with its fix and the evidence an assessor will expect) or a short summary, and download the result as Word or PDF.

Crosswalk Vietnam PDPL to other standards

With Vietnam PDPL in your plan you can compare it against any standard in the library and see where they align and exactly where they don’t. Common pairings:

What it’s built from

Compliance Colleague carries the official text and checks its answers against it: Law on Personal Data Protection No. 91/2025/QH15 (Official Gazette (Công báo), Government Office of Vietnam); Decree No. 356/2025/ND-CP detailing the Law on Personal Data Protection (Official Gazette (Công báo), Government Office of Vietnam).

Re-checked every month for new versions, deadlines and penalty changes. Full list on the sources page.

Compliance Colleague covers 30+ security, privacy and AI governance standards. It reviews policies, spreadsheets and diagrams and answers questions with the clause cited; your judgment and sign-off stay with you. Try it free, no card required →

Research aid, not legal or audit advice, and not an audit opinion or certification. Verify findings against the official text before relying on them.