Draft Decree on Data Exchanges: Proposed Legal Framework for Data Transactions in Vietnam

April 22, 2026

Draft Decree on Data Exchanges: Proposed Legal Framework for Data Transactions in Vietnam

The draft Decree on data exchange operations is currently open for consultation and proposes a framework for organizing, operating, and governing data transactions in Vietnam in a more transparent, controlled, and secure manner.

A notable feature of the draft is the proposed model consisting of a β€œNational Data Exchange,” managed by National Data Center, and other data exchanges. All exchanges would be required to meet at least Level 3 information system security standards and maintain interoperability with the National Data Exchange.

The draft also introduces several key mechanisms:

  • State-managed data is classified as public property.
  • All data products and services must undergo mandatory review and assessment before being listed.
  • Data transactions must be concluded through electronic contracts.
  • Buyers may test data in a segregated and secure environment before completing a transaction, enabling them to assess data quality and develop analytics models, AI applications, or new products without copying or removing the original data from the exchange’s infrastructure.

The draft is still under consultation and could become Vietnam’s first comprehensive legal framework governing data transactions, while also establishing requirements on security, privacy, and accountability for all participating parties.

πŸ”— See more details here: Draft Decree on data exchange operations


Privacy Compliance

REDDIT FINED Β£14.47 MILLION FOR CHILDREN’S PRIVACY FAILURES β€” A LANDMARK UK ENFORCEMENT ACTION

πŸ” π—₯π—˜π——π——π—œπ—§ π—™π—œπ—‘π—˜π—— Β£14.47 π— π—œπ—Ÿπ—Ÿπ—œπ—’π—‘ 𝗙𝗒π—₯ π—–π—›π—œπ—Ÿπ——π—₯π—˜π—‘β€™π—¦ 𝗣π—₯π—œπ—©π—”π—–π—¬ π—™π—”π—œπ—Ÿπ—¨π—₯π—˜π—¦ β€” 𝗔 π—Ÿπ—”π—‘π——π— π—”π—₯π—ž π—¨π—ž π—˜π—‘π—™π—’π—₯π—–π—˜π— π—˜π—‘π—§ π—”π—–π—§π—œπ—’π—‘ Recently, the Information Commissioner’s Office (ICO) imposed a fine of approximately Β£14.47 million (~USD 19.5 million) on Reddit for processing the personal data of users under 13 without implementing appropriate age verification measures. This is reported to be the largest […]

Learn more

Privacy Compliance

RECRUITMENT ANNOUNCEMENT – MARKETING INTERN

Privacy Compliance Joint Stock Company is recruiting a Marketing Intern to support communication and brand development activities in the field of personal data protection and privacy. Job Description Assist in developing and implementing communication plans and content (website, LinkedIn, Facebook, email marketing, etc.). Coordinate in editing articles on data protection, compliance, and risk management (under […]

Learn more

Privacy Compliance

RECRUITMENT ANNOUNCEMENT – PRIVACY ASSOCIATE

Privacy Compliance Joint Stock Company is recruiting a Privacy Associate in the field of personal data protection and privacy. Job Description Advise clients on personal data protection matters. Review, develop, and refine internal policies and procedures; assess compliance levels and propose improvement roadmaps. Conduct Data Protection Impact Assessments (DPIA) and Data Transfer Impact Assessments (DTIA). […]

Learn more