DPDPA is now in force in India. Run a free privacy scan on your site. Scan now

🇻🇳 Asia-Pacific

Cookie consent in Việt Nam

Consent and privacy law in Việt Nam

In short
Vietnam's Personal Data Protection Decree, No. 13/2023, took effect in July 2023 and is the country's first comprehensive data protection instrument, overseen by the Ministry of Public Security. It is consent-heavy, requiring consent that is freely given, specific, informed, and unambiguous, and it must be expressed in a format that can be printed or reproduced in writing, which is a demanding documentation standard. A notable obligation is filing an impact assessment dossier with the Ministry of Public Security for many processing and cross border transfer activities. Notices in Vietnamese are expected. A full Personal Data Protection Law is expected to follow and strengthen the framework further.
Status

Personal Data Protection Decree No. 13/2023/ND-CP in force since July 2023

Primary law
PDPD
Languages

vi

Who must comply

Agencies, organizations and individuals that process personal data of people in Vietnam, including foreign parties processing such data.

Penalties

Administrative sanctions under the decree, with a dedicated data protection law expected

Key obligations

  • Obtain clear, affirmative and recorded prior consent
  • Provide notice of purpose before processing
  • Honor access, correction, deletion and withdrawal rights
  • Carry out and file impact assessment dossiers
  • Meet cross-border transfer assessment requirements

Local guidance

  • Apply Decree No. 13/2023 on personal data protection
  • Record consent in a reproducible written format
  • File impact assessment dossiers where required
  • Provide notices in Vietnamese

How ConsentX helps

  • Affirmative, recorded opt-in consent capture
  • Prior-script blocking before processing
  • Withdrawal and rights request workflow
  • Consent receipts and evidence dossiers
  • Region rule engine tuned for Vietnam
Get started free
yoursite.com
🇻🇳 Vietnam

We value your privacy

We ask for your consent before any non-essential cookie, with the rules that apply in your region.

Allow allReject non-essentialManage preferences

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.

How to comply with Vietnam using ConsentX

  1. 1

    Scan your website

    Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Vietnam.

  2. 2

    Show a geo-aware consent banner

    Add the ConsentX banner. It detects each visitor region and shows the consent experience that Vietnam requires, automatically.

  3. 3

    Block trackers until consent

    Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.

  4. 4

    Record tamper-evident proof

    Every choice is stored as a tamper-evident consent receipt you can produce in a Vietnam audit.

  5. 5

    Handle data requests on time

    Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.

Frequently asked questions

What documentation does Vietnam require for consent?+

Consent must be freely given, specific, informed, and unambiguous, and expressed in a format that can be printed or reproduced in writing, which is a demanding documentation standard.

Does Vietnam require impact assessments?+

Yes. The decree requires filing impact assessment dossiers with the Ministry of Public Security for many processing activities and for cross border transfers of personal data.