Vietnam Personal Data Protection Decree(PDPD)

Frequently asked questions about PDPD

Frequently asked questions about PDPD

  • What is the PDPD?

    Decree No. 13/2023/ND-CP on the Protection of Personal Data, promulgated on April 17, 2023, is the first law of the government to integrate personal data regulations, which provides for the definition, classification and processing principles of personal data. The Decree also stipulates specific measures and conditions for the protection of personal data, including administrative and technical measures that organizations and individuals shall take in connection with the processing of personal data.

  • What is the scope of Vietnam’s PDPD?

    The Vietnam PDPD applies to:

    ● Vietnamese agencies, organizations and individuals;

    ● Foreign agencies, organizations and individuals being based in Vietnam;

    ● Vietnamese agencies, organizations and individuals operating overseas;

    ● Foreign agencies, organizations and individuals directly participating in or involved in the personal data processing in Vietnam.

  • How does Huawei Cloud meet the core requirements of the Vietnam PDPD?

    The Vietnam PDPD sets out the following core regulatory requirements on personal data processing:

    • Ensure the Security of Personal Data

    • Notify and Obtain Consent

    • Collect and Process Sensitive and Children’s Data Conditionally

    • Time limit for responding to data subjects' rights requests

    • Dossier for assessment of the impact of cross-border transfer of personal data

    • Assessment of the impact of personal data processing

    • Time Limitation of Data Retention

    • Personal data Protection in the marketing and advertisement business


    Huawei Cloud has analyzed the applicability of each of the core requirements to Huawei Cloud and formulated corresponding measures. For example, in the core requirement "Notify and Obtain Consent", there are two specific requirements applicable to Huawei Cloud: "notification" and “withdrawal of consent". To meet these specific requirements, Huawei Cloud has formulated corresponding measures. For example, when you register an account, Huawei Cloud will display the Privacy Policy Statement. You can click OK to give your consent. For more information, see Huawei Cloud Vietnam Privacy Compliance Instruction.

  • Which certifications for Huawei Cloud infrastructure and services can help me more quickly meet the compliance requirements of Vietnam PDPD?

    Since you have full control over your content data, you should correctly identify all personal data on the cloud, use appropriate services, and develop security and personal data protection policies to ensure personal data security. In addition, you can use multiple privacy protection services provided by Huawei Cloud to strengthen personal data protection. For details, see section 6.2 in Huawei Cloud Vietnam Privacy Compliance Instruction.

  • How does Huawei Cloud support me in complying with Vietnam’s PDPD?

    If your content data contains personal data of other data subjects, you may fall into the jurisdiction of Vietnam PDPD. If so, you should comply with its requirements for data controllers. For each core requirement of the Decree, Huawei Cloud lists your privacy protection responsibilities and the corresponding service support that Huawei Cloud can provide for you.


    In addition, Huawei Cloud provides you with cloud products or services to help you comply with the regulations of Vietnam PDPD. The products and services include network products, database products, security products, and management and deployment tools. They provide functions such as data protection, data deletion, network isolation, and permission management to help you protect content data privacy. For details about specific products or services as well as the corresponding core requirements and control measures in the Vietnam PDPD, see Huawei Cloud Vietnam Privacy Compliance Instruction.