Vietnam’s new Personal Data Protection Law (PDPL) and its implementing rules took effect on January 1, 2026, marking a major shift in the country’s privacy and data governance regime. The law enhances individual rights, tightens consent and procedural obligations, and classifies personal data into basic and sensitive categories. It also sets detailed compliance mechanisms for transfers, breach notifications, and sector-specific standards, aligning Vietnam’s framework more closely with global practices while maintaining national priorities.

