{"id":10415,"date":"2024-10-16T17:21:58","date_gmt":"2024-10-16T10:21:58","guid":{"rendered":"https:\/\/cdlaf.vn\/?p=10415"},"modified":"2024-10-16T17:36:55","modified_gmt":"2024-10-16T10:36:55","slug":"how-does-the-draft-personal-data-protection-law-regulate-the-consent-rights-of-data-subjects","status":"publish","type":"post","link":"https:\/\/cdlaf.vn\/en\/how-does-the-draft-personal-data-protection-law-regulate-the-consent-rights-of-data-subjects\/","title":{"rendered":"How does the draft Personal Data Protection Law regulate the consent rights of data subjects"},"content":{"rendered":"<p>Nowadays, personal data becoming a valuable resource in the digital age, the protection of user privacy is gaining increasing attention. To ensure safety and transparency in the collection process of personal data, the draft Personal Data Protection Law proposes strict regulations regarding the consent rights of data subjects. This right not only guarantees users&#8217; autonomy in controlling their personal information but also imposes stringent legal requirements on organizations and individuals involved in data processing.<\/p>\n<p>This article will analyze in detail the regulations concerning the consent rights of data subjects in the draft Law, helping to clarify the rights and responsibilities of the parties involved in today&#8217;s digital environment.<\/p>\n<figure id=\"attachment_10406\" aria-describedby=\"caption-attachment-10406\" style=\"width: 599px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-10406 size-medium\" src=\"http:\/\/cdlaf.vn\/wp-content\/uploads\/2024\/10\/pexels-cytonn-955393-599x400.jpg\" alt=\"\" width=\"599\" height=\"400\" srcset=\"https:\/\/cdlaf.vn\/wp-content\/uploads\/2024\/10\/pexels-cytonn-955393-599x400.jpg 599w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2024\/10\/pexels-cytonn-955393-1198x800.jpg 1198w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2024\/10\/pexels-cytonn-955393-768x513.jpg 768w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2024\/10\/pexels-cytonn-955393-1536x1025.jpg 1536w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2024\/10\/pexels-cytonn-955393-2048x1367.jpg 2048w\" sizes=\"auto, (max-width: 599px) 100vw, 599px\" \/><figcaption id=\"caption-attachment-10406\" class=\"wp-caption-text\">Sourcce: pexels-cytonn-955393<\/figcaption><\/figure>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of contents:<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #a32411;color:#a32411\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #a32411;color:#a32411\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/cdlaf.vn\/en\/how-does-the-draft-personal-data-protection-law-regulate-the-consent-rights-of-data-subjects\/#1_The_consent_of_the_data_subject_is_mandatory\" >1. The consent of the data subject is mandatory<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/cdlaf.vn\/en\/how-does-the-draft-personal-data-protection-law-regulate-the-consent-rights-of-data-subjects\/#2_The_Right_to_Withdraw_Consent_of_Data_Subjects\" >2. The Right to Withdraw Consent of Data Subjects<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/cdlaf.vn\/en\/how-does-the-draft-personal-data-protection-law-regulate-the-consent-rights-of-data-subjects\/#SEND_CONSULTATION_REQUEST\" >SEND CONSULTATION REQUEST<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"1_The_consent_of_the_data_subject_is_mandatory\"><\/span><span style=\"font-size: 23.04px; color: #333333;\">1. The consent of the data subject is mandatory<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The draft Personal Data Protection Law emphasizes the crucial role of consent from data subjects in the process of handling personal data. This is a fundamental and mandatory principle to ensure users&#8217; rights in today&#8217;s digital environment.<\/p>\n<p><strong>Consent is mandatory:<\/strong> The law stipulates that consent from the data subject is a prerequisite for all personal data processing activities, except in specific cases provided by law.<\/p>\n<p><strong>Validity of consent:<\/strong> Consent is only valid when the data subject voluntarily and fully understands the relevant factors, such as the type of data, purpose of processing, related organizations, and their rights.<\/p>\n<p><strong>No compulsory conditions:<\/strong> Organizations cannot require data subjects to consent to the transfer of personal data for purposes other than those initially disclosed. Data subjects have the right to refuse such requests.<\/p>\n<p><strong>Clear affirmative action:<\/strong> Consent must be expressed through specific actions, such as writing, speaking, selecting a consent checkbox, or responding via message, ensuring clarity and transparency.<\/p>\n<p><strong>Specific purposes:<\/strong> When processing data for multiple purposes, organizations must list each specific purpose so that data subjects can consent to each one individually.<\/p>\n<p><strong>Easy storage and verification:<\/strong> Consent must be able to be printed, copied, or stored in either written or electronic form to ensure transparency and easy verification.<\/p>\n<p><strong>No automatic consent: <\/strong>Silence or without response from the data subject shall not be considered as consent.<\/p>\n<p><strong>Partial or conditional consent:<\/strong> Data subjects have the right to provide partial consent or consent under certain conditions when providing personal data.<\/p>\n<p><strong>Sensitive data:<\/strong> When processing sensitive data, organizations must clearly inform data subjects so that they can decide whether to consent.<\/p>\n<p><strong>Validity of consent:<\/strong> Consent remains valid until the data subject changes their mind or until requested by an authorized governmental authority.<\/p>\n<p><strong>Responsibility of proof:<\/strong> In the case of a dispute, the responsibility to prove consent lies with the personal data controller.<\/p>\n<p><strong>Right to authorize:<\/strong> Data subjects can authorize an organization or individual representative to carry out procedures related to personal data processing, provided that they have been informed and have consented in advance.<\/p>\n<p>Thus, the draft Personal Data Protection Law provides a comprehensive legal framework to protect users&#8217; rights, ensuring that the consent of data subjects is always a core and mandatory element in all activities related to personal data. This is something enterprises need to pay attention to in order to ensure legality and transparency in handling the data of employees, customers, and users\u2026<\/p>\n<h2><span class=\"ez-toc-section\" id=\"2_The_Right_to_Withdraw_Consent_of_Data_Subjects\"><\/span>2. The Right to Withdraw Consent of Data Subjects<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>In the draft Personal Data Protection Law, Article 12 outlines specific provisions regarding the right of data subjects to withdraw their consent. This protects privacy and ensures transparency in the processing of personal data. Here are the key points regarding the withdrawal of consent:<\/p>\n<p><strong>Legality not affected:<\/strong> The withdrawal of consent does not affect the legality of data processing activities that were conducted based on prior consent. This ensures that data already processed will not be deemed unlawful.<\/p>\n<p><strong>Transparent format:<\/strong> Requests to withdraw consent must be made in a format that can be printed, copied in writing, including electronic formats or verifiable methods. This creates transparency and provides related parties with clear evidence when necessary.<\/p>\n<p><strong>Notification of consequences:<\/strong> Upon receiving a request to withdraw consent, the personal data controller and relevant parties are responsible for informing the data subject about the potential consequences and damages that may arise from withdrawing consent. This helps data subjects to carefully consider their decision.<\/p>\n<p><strong>Stop Data Processing:<\/strong> After completing the consent withdrawal process, all relevant parties, including the Data Controller, Data Processor, and third parties, are responsible for ceasing the processing of personal data. They must also request that other organizations or individuals stop processing any previously collected data.<\/p>\n<p>The provisions regarding the withdrawal of consent in the draft Personal Data Protection Law emphasize the rights of data subjects in managing their personal information. This not only ensures the legality for data processing parties but also provides users with flexibility in protecting their privacy.<\/p>\n<p>We can see that the draft Personal Data Protection Law lays a crucial foundation for safeguarding individual privacy in the context of rapidly advancing digital technology. The regulations on data subject consent affirm the right to control personal information and create transparent and strict legal mechanisms for organizations and individuals involved in data processing. The clarity and specificity of these regulations will help build user trust while promoting sustainable development in the digital environment. Understanding and adhering to these regulations is the responsibility of all parties to ensure safety and transparency in the use and management of personal data.<\/p>\n<p><strong><em>Time of writing:<\/em><\/strong> 15\/10<em>\/2024<\/em><\/p>\n<p><em>The article contains general information which is of reference value, in case you want to receive legal opinions on issues you need clarification on, please get in touch with our Lawyer \u00a0at\u00a0 <a href=\"https:\/\/mail.google.com\/mail\" target=\"_blank\" rel=\"noopener\"><strong>info@cdlaf.vn<\/strong><\/a><\/em><\/p>\n<div class=\"content-post-nd\">\n<div style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-5519 size-full aligncenter\" src=\"http:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG.png\" alt=\"\" width=\"1080\" height=\"600\" srcset=\"https:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG.png 1080w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG-720x400.png 720w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG-768x427.png 768w\" sizes=\"auto, (max-width: 1080px) 100vw, 1080px\" \/><\/div>\n<\/div>\n<div class=\"content-post-nd\">\n<p><strong>Why choose CDLAF\u2019s service?<\/strong><\/p>\n<ul class=\"li-content\">\n<li>We provide effective and comprehensive legal solutions that help you save money and maintain compliance in your business;<\/li>\n<li>We continue to monitor your legal matters even after the service is completed and update you when there are any changes in the Vietnamese legal system;<\/li>\n<li>Our system of forms and processes related to labor and personnel is continuously built and updated and will be provided as soon as the customer requests it;<\/li>\n<li>As a Vietnamese law firm, we have a thorough understanding of Vietnam&#8217;s legal regulations, and grasp the psychology of employees, employers, and working methods at competent authorities;<\/li>\n<li>CDLAF&#8217;s team of lawyers has many years of experience in the field of labor and enterprises, as well as human resources and financial advisory.<\/li>\n<li>Strict information security procedures throughout the service performance and even after the service is completed.<\/li>\n<\/ul>\n<\/div>\n<p><strong style=\"color: #a32411;\">You can refer for more information:<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/cdlaf.vn\/en\/is-on-behalf-salary-payment-for-employees-a-service-or-a-support-activity\/\">Is on-behalf salary payment for employees a service or a support activity?<\/a><\/li>\n<li><a href=\"https:\/\/cdlaf.vn\/en\/distinguishing-between-labor-outsourcing-and-service-provision\/\">Distinguishing Between Labor Outsourcing and Service Provision<\/a><\/li>\n<li><a href=\"https:\/\/cdlaf.vn\/en\/is-it-allowable-for-a-business-to-transform-foreign-loans-into-capital-contributions\/\">Is it allowable for a business to transform foreign loans into capital contributions?<\/a><\/li>\n<\/ul>\n\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f2681-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"2681\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/10415#wpcf7-f2681-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"2681\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.5\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f2681-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<h2 class=\"tt-form\"><span class=\"ez-toc-section\" id=\"SEND_CONSULTATION_REQUEST\"><\/span>SEND CONSULTATION REQUEST\n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><label>Full name<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"full-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"full-name\" \/><\/span><br \/>\n<label>Email<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"email\" name=\"email\" \/><\/span><br \/>\n<label>Phone Number<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"phone\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-tel wpcf7-text wpcf7-validates-as-tel\" aria-invalid=\"false\" value=\"\" type=\"tel\" name=\"phone\" \/><\/span><br \/>\n<label>Message<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"coment\"><textarea cols=\"40\" rows=\"10\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea\" aria-invalid=\"false\" name=\"coment\"><\/textarea><\/span><br \/>\n<input class=\"wpcf7-form-control wpcf7-submit has-spinner btn-yellow\" type=\"submit\" value=\"Send\" \/>\n<\/p><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Nowadays, personal data becoming a valuable resource in the digital age, the protection of user privacy is gaining increasing attention. To ensure safety and transparency in the collection process of personal data, the draft Personal Data Protection Law proposes strict regulations regarding the consent rights of data subjects. This right not only guarantees users&#8217; autonomy&#8230;<\/p>\n","protected":false},"author":4,"featured_media":10406,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[64],"tags":[],"class_list":["post-10415","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"acf":[],"_links":{"self":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/posts\/10415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/comments?post=10415"}],"version-history":[{"count":0,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/posts\/10415\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/media\/10406"}],"wp:attachment":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/media?parent=10415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/categories?post=10415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/tags?post=10415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}