Legal Update | Decree No. 13/2023/ND-CP on personal data protection | May 2023

  This Update highlights the following key points:

  • Scope of application and categories of regulated subjects 
  • Broad definition of personal data and data processing
  • Valid consent
  • Data subject rights
  • Data protection impact assessment
  • Management of sensitive personal data processing and cross-border data transfer
  • Protection of personal data in the business of marketing and products promotion business
  • Data protection officer role
  • Personal data protection authority
  • Measures to protect personal data

Required actions


Download this document