Articles
Enterprise risk management: key issues enterprises must pay attention to (Part 1)
The year 2026 marks a turning point in enterprise governance as new legal regulations impose...
New Standards for “Consent” and the Burden of Proof
The standards for data subject “Consent” have evolved significantly from Decree No. 13/2023/ND-CP toward the...
Artificial Intelligence (AI) and Personal Data Rights
The development of artificial intelligence (“AI”) has had an impact on many aspects of social...
Internal control responsibilities and data sharing within organizations
The promulgation of the Law on Personal Data Protection 2025 and Decree No. 356/2025/ND-CP has...
Personal data protection Personnel under Decree 356: In-house Implementation or Hiring Professional External Services?
Under the Personal Data Protection Law 2025 and Decree No. 356/2025/ND-CP, businesses have the right...
Conditions for the transfer of data to partners to be considered “valid”
In operational practice, many enterprises implicitly assume that transferring data to partners is an “obvious”...
Regulations regarding Personal Data under current Personal Data Protection Law
According to the Law on Personal Data Protection 2025 and Decree 356/2025/ND-CP, enterprises (in the...
Data and Legal Considerations in Outsourcing Contracts (Part 1)
In modern governance models, the use of outsourcing services for functions such as accounting and...
Overview of New Regulations and Incentive Mechanisms under Decree 354/2025/ND-CP on Concentrated Digital Technology Zones
Decree No. 354/2025/ND-CP stipulates special investment incentive mechanisms for Concentrated Digital Technology Zones, applying the...
Claims for Damages in Commercial Contracts
Definition of Damages: Under the Commercial Law of 2005, compensation for damages is one of...
Decree No. 356/2025/ND-CP: Which enterprises are exempt from personal data procedures?
According to the latest regulations, micro-enterprises, household businesses, and startups are eligible for exemptions or...
[2026 Update] Cross-Border Data Transfer under Decree No. 356/2025/ND-CP: Regulations and Compliance Procedures
Cross-border transfers of personal data under Decree No. 356/2025/ND-CP include storing data on overseas servers/cloud...
Rights of Personal Data Subjects and methods of obtaining consent under Decree No. 356/2025/ND-CP
Under Decree No. 356/2025/ND-CP, the responsibilities of data processing organizations have been significantly strengthened, with...
Differentiating between Business License to provide cyber information security services and product and Business License for Civil Cryptography Products and Services: Confusions to Eliminate
The Business License to provide Cyber Information Security Services and Products (“Cyber Information Security License”) and...
Execution of Electronic Labor Contracts: Compliance Conditions and Implementation Process
An electronic labor contract (e-Contract) has the same legal validity as a paper-based contract if...
Impacts of Decree No. 337/2025/NĐ-CP on Electronic Labour Contracts
The Government’s promulgation of Decree No. 337/2025/ND-CP (“Decree 337”) on electronic labour contracts marks an...
Essential clauses in an overseas (foreign party) processing contract
In the context of globalization and the ongoing restructuring of supply chains, Vietnam has increasingly...
Tax obligations applicable to foreign individuals working as freelancers in Vietnam
Can a foreign individual working as a freelancer in Vietnam register for a tax identification...
