Guidelines on impact and risk assessment under Vietnamese Data Law
This material is designed to provide detailed and consistent guidance for internal Enterprises on conducting four types of material compliance assessments under the Data Law and related decrees, and is based on the time when Decree 13/2023/ND-CP on personal data is in effect. Strict compliance with the procedures outlined below is a mandatory requirement to ensure that all activities of the organization are in accordance with the law, protect strategic data assets and minimize legal risks.