{"id":11032,"date":"2025-03-21T11:43:59","date_gmt":"2025-03-21T04:43:59","guid":{"rendered":"https:\/\/cdlaf.vn\/?p=11032"},"modified":"2025-03-21T11:49:29","modified_gmt":"2025-03-21T04:49:29","slug":"is-the-consent-of-the-data-subject-mandatory-by-law","status":"publish","type":"post","link":"https:\/\/cdlaf.vn\/en\/is-the-consent-of-the-data-subject-mandatory-by-law\/","title":{"rendered":"Is the consent of the data subject mandatory by law?"},"content":{"rendered":"<p>Amid the rapid rise of commercialization and digital technology, the Vietnamese government has placed a strong emphasis on the strict management of digital information. This stems from the increasing prevalence of scams exploiting personal data leaks, for which businesses collecting user information are held accountable.<\/p>\n<p>Currently, the Draft Law on Personal Data Protection is under review and pending approval by the National Assembly. In the meantime, Decree No. 13\/2023\/N\u0110-CP remains the primary legal framework regulating businesses\u2019 responsibilities in collecting, storing, and processing personal data of employees and customers. According to this Decree, all activities involving personal data must obtain the consent of the data subject. So, what is the scope and how should such consent be expressed? The following article will provide a detailed analysis.<\/p>\n<figure id=\"attachment_10998\" aria-describedby=\"caption-attachment-10998\" style=\"width: 604px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-10998 size-medium\" src=\"http:\/\/cdlaf.vn\/wp-content\/uploads\/2025\/03\/pexels-goumbik-590022-604x400.jpg\" alt=\"\" width=\"604\" height=\"400\" srcset=\"https:\/\/cdlaf.vn\/wp-content\/uploads\/2025\/03\/pexels-goumbik-590022-604x400.jpg 604w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2025\/03\/pexels-goumbik-590022-1208x800.jpg 1208w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2025\/03\/pexels-goumbik-590022-768x509.jpg 768w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2025\/03\/pexels-goumbik-590022-1536x1017.jpg 1536w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2025\/03\/pexels-goumbik-590022-2048x1356.jpg 2048w\" sizes=\"auto, (max-width: 604px) 100vw, 604px\" \/><figcaption id=\"caption-attachment-10998\" class=\"wp-caption-text\">Source: pexels-goumbik-590022<\/figcaption><\/figure>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of contents:<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #a32411;color:#a32411\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #a32411;color:#a32411\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/cdlaf.vn\/en\/is-the-consent-of-the-data-subject-mandatory-by-law\/#1_Is_the_consent_of_the_data_subject_mandatory\" >1. Is the consent of the data subject mandatory<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/cdlaf.vn\/en\/is-the-consent-of-the-data-subject-mandatory-by-law\/#2_Forms_of_Expressing_the_Consent_of_the_Data_Subject\" >2. Forms of Expressing the Consent of the Data Subject<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/cdlaf.vn\/en\/is-the-consent-of-the-data-subject-mandatory-by-law\/#SEND_CONSULTATION_REQUEST\" >SEND CONSULTATION REQUEST<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"1_Is_the_consent_of_the_data_subject_mandatory\"><\/span>1. Is the consent of the data subject mandatory<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Within the scope of relationships between users and service providers, businesses and employees, and other similar interactions, obtaining the consent of the data subject is mandatory, except in certain specific cases. According to Decree No. 13\/2023\/N\u0110-CP, the consent of the data subject applies to all activities within the personal data processing cycle, unless otherwise stipulated by law.<\/p>\n<p>To ensure that the consent of the data subject is valid, the data processor (including businesses, organizations, e-commerce platforms, etc.) must have a clear basis to confirm that the data subject is fully aware of the information being collected and processed and has voluntarily given their consent. Accordingly, the data processor must ensure that the data subject clearly understands the following:<\/p>\n<ul>\n<li>The types of personal data being processed;<\/li>\n<li>The purpose of processing personal data;<\/li>\n<li>The organizations and individuals authorized to process personal data;<\/li>\n<li>The rights and obligations of the data subject.<\/li>\n<\/ul>\n<p>Additionally, the data processor must ensure that the data subject&#8217;s consent is expressed explicitly and specifically through written documents, voice recordings, ticking an agreement box, consent syntax via messages, selecting technical consent settings, or any other action demonstrating consent.<\/p>\n<p>Consent must be given for a single purpose. If multiple purposes exist, the data controller or processor must list them clearly, allowing the data subject to consent to one or more of the specified purposes.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"2_Forms_of_Expressing_the_Consent_of_the_Data_Subject\"><\/span>2. Forms of Expressing the Consent of the Data Subject<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The consent of the data subject must be expressed in a format that can be printed or copied in writing, including electronic or verifiable formats. The personal data processor must also recognize that silence or a lack of response from the data subject cannot be considered as consent.<\/p>\n<p>Accordingly, the method of obtaining consent will vary depending on the specific circumstances, the method of data collection, and the intended use of personal data. For instance, when collecting employees&#8217; personal data, the terms regarding the rights and scope of data collection and processing must be documented in one of the following: the employment contract, an annex to the employment contract, or another written document that clearly expresses the employee&#8217;s consent.<\/p>\n<p>In business relationships with service providers handling personal data, the terms regarding data processing must also be documented in contracts or other legally recognized forms that clearly express the data subject&#8217;s consent. For businesses operating in sectors such as human resources, payroll, labor outsourcing, insurance, and finance, it is essential to establish contractual obligations with service users, ensuring that service providers have the right to process personal data obtained either directly or indirectly from them.<\/p>\n<p>For websites, e-commerce platforms, or digital services that collect user information upon access, it is crucial to transparently inform users about the types of data being collected, the purpose of collection, and how consent is obtained and recorded as evidence of the user&#8217;s authorization for data collection.<\/p>\n<p>Given the current regulations governing the collection and processing of personal data\u2014as well as the upcoming Personal Data Protection Law\u2014businesses must take proactive measures to ensure that, across all relationships and platforms, they have obtained the explicit consent of data subjects for the collection, storage, and processing of personal data.<\/p>\n<p>We anticipate that regulatory authorities will enforce stricter oversight in the near future. Currently, legal frameworks and monitoring tools are being developed, and penalties for non-compliance with personal data processing regulations\u2014including domestic processing and cross-border data transfers\u2014will soon be effectively implemented. Therefore, at this stage, with newly issued legal provisions and less strict supervision from the regulatory authorities, particularly the Ministry of Public Security, the process of complying with personal data regulations is expected to be relatively straightforward. The conditions imposed on data processors are also expected to be less stringent at this initial stage.<\/p>\n<p><strong><em>Time of writing:<\/em><\/strong> 18\/03\/2025<\/p>\n<p><em>The article contains general information which is of reference value, in case you want to receive legal opinions on issues you need clarification on, please get in touch with our Lawyer \u00a0at\u00a0 <a href=\"https:\/\/mail.google.com\/mail\" target=\"_blank\" rel=\"noopener\"><strong>info@cdlaf.vn<\/strong><\/a><\/em><\/p>\n<div class=\"content-post-nd\">\n<div style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-5519 size-full aligncenter\" src=\"http:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG.png\" alt=\"\" width=\"1080\" height=\"600\" srcset=\"https:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG.png 1080w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG-720x400.png 720w, https:\/\/cdlaf.vn\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG-768x427.png 768w\" sizes=\"auto, (max-width: 1080px) 100vw, 1080px\" \/><\/div>\n<\/div>\n<div class=\"content-post-nd\">\n<p><strong>Why choose CDLAF\u2019s service?<\/strong><\/p>\n<ul class=\"li-content\">\n<li>We provide effective and comprehensive legal solutions that help you save money and maintain compliance in your business;<\/li>\n<li>We continue to monitor your legal matters even after the service is completed and update you when there are any changes in the Vietnamese legal system;<\/li>\n<li>Our system of forms and processes related to labor and personnel is continuously built and updated and will be provided as soon as the customer requests it;<\/li>\n<li>As a Vietnamese law firm, we have a thorough understanding of Vietnam&#8217;s legal regulations, and grasp the psychology of employees, employers, and working methods at competent authorities;<\/li>\n<li>CDLAF&#8217;s team of lawyers has many years of experience in the field of labor and enterprises, as well as human resources and financial advisory.<\/li>\n<li>Strict information security procedures throughout the service performance and even after the service is completed.<\/li>\n<\/ul>\n<\/div>\n<p><strong style=\"color: #a32411;\">You can refer for more information:<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/cdlaf.vn\/en\/conditions-for-establishing-a-company-operating-in-the-logistics-field\/\">Conditions for establishing a company operating in the logistics field<\/a><\/li>\n<li><a href=\"https:\/\/cdlaf.vn\/en\/conditions-for-conducting-organization-of-conventions-and-trade-shows-a-legal-perspective-and-advice-for-foreign-investors\/\">Conditions for conducting Organization of Conventions and Trade Shows: A legal perspective and advice for Foreign Investors<\/a><\/li>\n<li><a href=\"https:\/\/cdlaf.vn\/en\/legal-requirements-for-organizing-various-types-of-events-in-vietnam-a-comprehensive-guide-for-investors\/\">Legal requirements for organizing various types of events in Vietnam: A comprehensive guide for investors<\/a><\/li>\n<\/ul>\n\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f2681-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"2681\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/11032#wpcf7-f2681-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"2681\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.5\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f2681-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<h2 class=\"tt-form\"><span class=\"ez-toc-section\" id=\"SEND_CONSULTATION_REQUEST\"><\/span>SEND CONSULTATION REQUEST\n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><label>Full name<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"full-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"full-name\" \/><\/span><br \/>\n<label>Email<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"email\" name=\"email\" \/><\/span><br \/>\n<label>Phone Number<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"phone\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-tel wpcf7-text wpcf7-validates-as-tel\" aria-invalid=\"false\" value=\"\" type=\"tel\" name=\"phone\" \/><\/span><br \/>\n<label>Message<\/label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"coment\"><textarea cols=\"40\" rows=\"10\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea\" aria-invalid=\"false\" name=\"coment\"><\/textarea><\/span><br \/>\n<input class=\"wpcf7-form-control wpcf7-submit has-spinner btn-yellow\" type=\"submit\" value=\"Send\" \/>\n<\/p><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Amid the rapid rise of commercialization and digital technology, the Vietnamese government has placed a strong emphasis on the strict management of digital information. This stems from the increasing prevalence of scams exploiting personal data leaks, for which businesses collecting user information are held accountable. Currently, the Draft Law on Personal Data Protection is under&#8230;<\/p>\n","protected":false},"author":4,"featured_media":10998,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[64],"tags":[],"class_list":["post-11032","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"acf":[],"_links":{"self":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/posts\/11032","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/comments?post=11032"}],"version-history":[{"count":2,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/posts\/11032\/revisions"}],"predecessor-version":[{"id":11034,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/posts\/11032\/revisions\/11034"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/media\/10998"}],"wp:attachment":[{"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/media?parent=11032"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/categories?post=11032"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cdlaf.vn\/en\/wp-json\/wp\/v2\/tags?post=11032"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}