Tilleke & Gibbins has contributed the Vietnam chapter to Data Protection 2025, a comprehensive comparative guide in the Law Over Borders series from Global Legal Post. This Q&A-style resource offers detailed insights into data protection regulations across multiple jurisdictions, serving as an essential reference for organizations managing personal data in today’s global business environment.

The Vietnam chapter examines the evolving data protection landscape in Vietnam, including analysis of relevant provisions in the Cybersecurity Law, the Law on Information Technology, and the upcoming Personal Data Protection Decree. The chapter addresses key aspects of data protection through the following topics:

• Regulatory framework: Analysis of national laws regulating personal data, jurisdictional scope, application to different entities, and regulated data processing activities.
• Data categories and processing: Overview of regulated personal data types, special categories requiring enhanced protection, and lawful processing requirements.
• Compliance requirements: Explanation of controller and processor obligations, technical and organizational measures, and data subject rights.
• Commercial communications and international transfers: Rules governing direct marketing and cross-border data flows.
• Regulatory oversight: Details on enforcement powers, investigation procedures, sanctions, and remedies for noncompliance.

Tilleke & Gibbins also contributed the Thailand chapter to Data Protection 2025. Readers can access the complete Data Protection 2025 guide through Global Legal Post’s Law Over Borders platform.