Articles

Internal control responsibilities and data sharing within organizations

The promulgation of the Law on Personal Data Protection 2025 and Decree No. 356/2025/ND-CP has...

  Articles | 22 January, 2026
Personal data protection Personnel under Decree 356: In-house Implementation or Hiring Professional External Services?

Under the Personal Data Protection Law 2025 and Decree No. 356/2025/ND-CP, businesses have the right...

  Articles | 22 January, 2026
Conditions for the transfer of data to partners to be considered “valid”

In operational practice, many enterprises implicitly assume that transferring data to partners is an “obvious”...

  Articles | 22 January, 2026
Regulations regarding Personal Data under current Personal Data Protection Law

According to the Law on Personal Data Protection 2025 and Decree 356/2025/ND-CP, enterprises (in the...

  Articles | 22 January, 2026
Data and Legal Considerations in Outsourcing Contracts (Part 1)

In modern governance models, the use of outsourcing services for functions such as accounting and...

  Articles | 22 January, 2026
Overview of New Regulations and Incentive Mechanisms under Decree 354/2025/ND-CP on Concentrated Digital Technology Zones

Decree No. 354/2025/ND-CP stipulates special investment incentive mechanisms for Concentrated Digital Technology Zones, applying the...

  Articles | 13 January, 2026
Claims for Damages in Commercial Contracts

Definition of Damages: Under the Commercial Law of 2005, compensation for damages is one of...

  Articles | 13 January, 2026
Decree No. 356/2025/ND-CP: Which enterprises are exempt from personal data procedures?

According to the latest regulations, micro-enterprises, household businesses, and startups are eligible for exemptions or...

  Articles | 9 January, 2026
[2026 Update] Cross-Border Data Transfer under Decree No. 356/2025/ND-CP: Regulations and Compliance Procedures

Cross-border transfers of personal data under Decree No. 356/2025/ND-CP include storing data on overseas servers/cloud...

  Articles | 7 January, 2026
Rights of Personal Data Subjects and methods of obtaining consent under Decree No. 356/2025/ND-CP

Under Decree No. 356/2025/ND-CP, the responsibilities of data processing organizations have been significantly strengthened, with...

  Articles | 7 January, 2026
Differentiating between Business License to provide cyber information security services and product and Business License for Civil Cryptography Products and Services: Confusions to Eliminate

The Business License to provide Cyber Information Security Services and Products (“Cyber Information Security License”) and...

  Articles | 6 January, 2026
Execution of Electronic Labor Contracts: Compliance Conditions and Implementation Process

An electronic labor contract (e-Contract) has the same legal validity as a paper-based contract if...

  Articles | 31 December, 2025
Impacts of Decree No. 337/2025/NĐ-CP on Electronic Labour Contracts

The Government’s promulgation of Decree No. 337/2025/ND-CP (“Decree 337”) on electronic labour contracts marks an...

  Articles | 30 December, 2025
Essential clauses in an overseas (foreign party) processing contract

In the context of globalization and the ongoing restructuring of supply chains, Vietnam has increasingly...

  Articles | 29 December, 2025
Tax obligations applicable to foreign individuals working as freelancers in Vietnam

Can a foreign individual working as a freelancer in Vietnam register for a tax identification...

  Articles | 29 December, 2025
Guidance on making a business plan – Business License to provide cyber information security services and products (Part 2)

Description of Business Strategy for Business License to provide cyber information security products and services....

  Articles | 29 December, 2025
Guidance on making a business plan – Business License to provide cyber information security services and products (Part 1)

Develop a personnel organizational chart in the Business Plan In the application for the Business...

  Articles | 29 December, 2025
Guidelines for Drafting the Personal Data Protection Plan in the Cross-Border Personal Data Transfer Impact Assessment Dossier (Part 2)

After the enterprise has identified and presented the technical and organizational measures for personal data...

  Articles | 19 December, 2025