Data Privacy & Cybersecurity

Vietnam's personal data rules apply to almost every business that has customers or employees, and they impose obligations that most companies discover only when something goes wrong — consent records, impact assessments, and strict conditions on sending data abroad.

Wise Counsel advises businesses on personal data compliance, cross-border transfers and incident response in Vietnam.

What we help with

• Mapping what personal data the business collects, why, and on what legal basis
• Drafting privacy notices, consent mechanisms and internal data policies
• Preparing personal data processing impact assessment dossiers
• Advising on cross-border transfer requirements and preparing transfer dossiers
• Data processing agreements with vendors, platforms and group companies
• Advising on data localisation and storage obligations
• Incident response — notification obligations and dealing with the authorities
• Employee data, monitoring and privacy in the workplace

The obligation most often missed is the cross-border transfer dossier. We check it before data starts moving, not after a complaint is filed.