July 14, 2025
Under Article 25 of Vietnam’s Personal Data Protection Law 2025, employers are required to delete or destroy employees’ personal data once the employment contract ends, unless otherwise agreed or legally required to retain it.
➡️ To continue processing personal data post-employment (e.g. for legal or compliance purposes), a clear, lawful agreement must be in place.
But that’s not all.
🛠️ The PDPL also introduces new obligations on transparency: Employers must inform employees about technologies used to monitor them — such as CCTV, productivity tracking software, timekeeping tools, or GPS-based systems.
💡 These changes raise essential compliance questions:
🎯 If your business is mapping out the compliance strategy, don’t miss our upcoming webinar: Personal Data Protection Law 2025: Where to Start?
📅 10:00 – 11:30 AM | Friday, July 25, 2025
📍 Online – Microsoft Teams
👉 Register now: https://forms.office.com/r/VQ97H7q1R8

💡 Looking Back on Our Two Workshops: Practical Perspectives on Personal Data Protection Following two specialised workshops on “Personal Data Protection”, PrivacyCompliance had the opportunity to engage with representatives from businesses and organisations, as well as professionals working in legal, compliance, information technology, data governance, and human resources. The programme focused not only on clarifying […]
Learn more
RECAP OF THE “PERSONAL DATA PROTECTION” WORKSHOP SERIES ✨ The specialized Personal Data Protection workshop series organized by PrivacyCompliance has officially concluded, supporting participants in strengthening their legal compliance capabilities in the field of personal data protection. 📚 The program was structured around four key modules: 🔹 Legal framework for personal data protection. 🔹 Establishing […]
Learn more
Recently, the Department for Receiving and Returning Administrative Procedure Results on Personal Data Protection issued guidance on the submission of soft copies of the Personal Data Processing Impact Assessment Dossier and/or the Cross-border Personal Data Transfer Impact Assessment Dossier. Under the guidance, organizations and enterprises are required to submit the dossier in a .ZIP compressed […]
Learn more