Vietnam

Ministry of Public Security's Department of Cybersecurity oversees personal data protection.

Consent required for processing. Must be voluntary, informed, and specific. Separate consent for sensitive data.

Rights to know, consent, access, delete, restrict, object, and data portability.

Impact assessment required. Filing with Ministry of Public Security for cross-border transfers.

Must notify Ministry of Public Security within 72 hours.

Must designate department and person responsible for personal data protection.

Parental consent required for children under 7. Enhanced protections for children under 16.

Administrative fines. Criminal penalties under the Cybersecurity Law.

SBV banking data rules, cybersecurity law, health data regulations.

General consent requirements apply.

General data protection provisions apply to automated processing.

Data localisation required under the Cybersecurity Law for certain service providers.

Large-scale processors have additional obligations.

Decree applies broadly. National security and defence exemptions.