Dezan Shira & Associates Hosts Panel on Vietnam’s Personal Data Protection Decree

Ho Chi Minh City — Dezan Shira & Associates proudly hosted a highly successful on-site panel discussion in Ho Chi Minh City, focusing on Vietnam’s Personal Data Protection Decree (13/2023/ND-CP). The event, held at the W Business Center, brought together a distinguished experts and an engaged audience to explore the regional context, implementation timeline, and practical case studies related to this pivotal regulation. 

The panel featured seasoned experts: Christophe Poisson, Founder and Cyber Security Expert of TekID Vietnam alongside Michael Hering, Global Data Protection Officer/Director at FPT Software. Dezan Shira & Associates was represented by Senior Manager for Vietnam’s Business Advisory Services, Tam Nguyen, supported by Vietnam Marketing Lead, Julia Goeb, who hosted and kicked off the session with a comprehensive introduction to the topic. 

The discussion began with an in-depth comparison of data protection laws across Singapore, China, and Vietnam. Contrary to common perceptions, the Chinese Personal Information Protection Law (PIPL) and Vietnam’s updated Personal Data Protection Decree are notably stringent, often surpassing Singapore’s requirements, particularly concerning commercial data sharing and cross-border transfers. Tam Nguyen highlighted the current implementation challenges, noting that, despite the Decree’s recent update in 2023, full implementation is still underway. 

Christophe Poisson provided valuable insights into the operational aspects of compliance, emphasizing the importance of early transition. His model suggested a typical implementation timeline of 3-4 months, depending on organizational complexity and team proficiency. He stressed the need for comprehensive training for internal data controllers, especially for handling “sensitive data.” 

Following Poisson, Michael Hering addressed critical questions organizations must consider regarding employee data management. Drawing from FPT Software’s experiences, he demonstrated the evolving significance of data protection and the need for updated practices, operational changes, and legal documentation. Despite being modelled after the EU’s GDPR, the Vietnamese Decree currently lacks the clarity offered by its European counterpart, potentially creating compliance uncertainties. 

The event concluded with engaging discussions among participants and panel experts, reflecting the growing importance of data protection in Vietnam. The gathering, co-hosted by the Canadian Chamber of Commerce, the Central and Eastern Chamber of Commerce, and the Spanish Chamber of Commerce, attracted over 40 attendees. Special appreciation was extended to CEEC Chairman Vlad Savin and the Oscar Lopez Alegre, Board Member of the Spanish Chamber of Commerce for their key introductory remarks. 

Dezan Shira & Associates is honored to have collaborated with such esteemed partners and looks forward to hosting more events that address critical regulatory issues in the Vietnamese market.  

Should you need any assistance or information regarding your own compliance and data protection concerns for your business in Vietnam, or if you handle the data of Vietnamese nationals in your overseas information systems and would like to gain more clarity on your obligations, get in touch with us and we will support you as best as we can. 

Dezan Shira & Associates remains committed to facilitating discussions on key trends and developments in international business. 

Further Resources

[Presentation Slides] Vietnam’s Personal Data Protection Decree – Dezan Shira & Associates

[Presentation Slides] Vietnam’s Personal Data Protection Decree – TEKID Vietnam

[Presentation Slides] Vietnam’s Personal Data Protection Decree  – FPT Software

---