News

The Government has issued Decree No. 24/2025/ND-CP, amending Decree No. 98/2020/ND-CP, which takes effect on February 21, 2025. This decree introduces significant updates on administrative sanctions for violations related to consumer information protection. Notably, Decree 24/2025/ND-CP increases penalties for certain violations compared to Decree 98/2020/ND-CP and expands the list of offenses subject to administrative sanctions. […]

Dear Clients, Partners and Colleagues, As the Lunar New Year approaches, we at PrivacyCompliance would like to extend our warmest wishes to you and your loved ones for a year filled with happiness, health, and prosperity. 🐉🌙 This festive season is a time to reflect, celebrate new beginnings, and embrace the opportunities ahead. We deeply […]

Dear Clients, Partners and Colleagues This holiday season, we celebrate the spirit of togetherness, hope, and generosity. It’s a time to reflect on our accomplishments and look forward to the opportunities that lie ahead. We’re excited to continue growing, innovating, and achieving great things together in the coming year. May this festive season bring joy, […]

CJEU confirms that competitors can sue each other for GDPR infringements  A German pharmacy sued another pharmacy for failing to guarantee explicit consent when processing the health data of the clients as prescribed under GDPR. The German Court held that such activity does amount to unfair and unlawful practice. However, the Court was unsure whether […]

EDPB’s Guidelines on Legitimate Intesrest Recently, the European Data Protection Board (“EDPB”) adopted Guidelines 01/2024 on processing of personal data based on Article 6(1)(f) GDPR (processing based on legitimate interest). Legitimate interest is one of the lawful grounds on which personal data can be processed. Its flexible nature makes it quite hard to actually apply […]

Can data subjects be data controllers? With the rise of AI trained on user data, the question of whether data subjects be considered data controllers for the personal data in their AI prompts and outputs has once again taken the spotlight. This is not a new issue, the possibility of the data subjects acting as […]

HOT NEWS The draft Personal Data Protection Law has officially been released for public consultation! The draft Personal Data Protection Law has proposed regulations on the protection of personal data and the responsibilities of relevant agencies, organizations, and individuals in protecting personal data. Additionally, the draft Personal Data Protection Law is expected to apply to: […]

Vietnam’s Draft Digital Industry Law On the 3rd of July 2024, the Vietnamese government released a draft of the Digital Industry Law for public consultation. The draft law promises to bring about a fresh change in hi-tech areas such as AI, big data, cloud computing, Internet of Things, etc. The law encourages the development of […]

Greater attention needed to respond to cyberinformation security threats The Government has recently required the intensification of response to cyberinformation security threats so as to build digital trust and protect the country’s prosperous development in the digital era, thus contributing to successfully completing the national digital transformation. Under Directive 18 dated October 13, the Prime […]

EU hits Amazon with record-breaking $887M GDPR fine over data misuse Luxembourg’s National Commission for Data Protection (CNPD) has hit Amazon with a record-breaking €746 million ($887 million) GDPR fine over the way it uses customer data for targeted advertising purposes. Amazon disclosed the ruling in an SEC filing on Friday in which it slammed the decision as baseless […]