Topic

Data sovereignty and compliance

Personal data protection law, data localization, cross-border transfers and on-premise versus cloud: legal analysis and how to apply it to real business systems.

SolutionsDigital transformation Cybersecurity AI for business operations

13 Entries

Transferring personal data abroad under the PDPL: records, process and penalties

Deep dive

06.18.2026

Transferring personal data abroad under the PDPL: records, process and penalties

The 2026 PDPL sets strict obligations for transferring personal data abroad, with the highest penalty of up to 5% of revenue. When it applies, what to file, and how to reduce risk with on-premise.

Read ↗

Deploying eOffice on-premise: data sovereignty seen from the architecture

Deep dive

06.03.2026

Deploying eOffice on-premise: data sovereignty seen from the architecture

Data sovereignty is more than servers located in Vietnam. A look at the architecture, infrastructure, integration and staffing behind an on-premise eOffice.

Read ↗

PDPL review season: impact assessment records and the DPO role

Deep dive

04.15.2026

PDPL review season: impact assessment records and the DPO role

After PDPL took effect, businesses enter a review season: impact assessment records, the DPO role, and reviewing data transfers out.

Read ↗

A PDPL & cybersecurity penalty decree is coming: compliance gets urgent

News

03.20.2026

A PDPL & cybersecurity penalty decree is coming: compliance gets urgent

The Ministry of Public Security is consulting on a draft decree on administrative penalties for cybersecurity and personal data violations. PDPL gets teeth.

Read ↗

The Data Law and PDPL: telling them apart to comply correctly

Deep dive

03.10.2026

The Data Law and PDPL: telling them apart to comply correctly

The Data Law 60/2024 and PDPL 91/2025 are related but not the same. Knowing each scope helps businesses comply on point.

Read ↗

Storing and protecting data: how long to keep, when to delete?

Deep dive

02.04.2026

Storing and protecting data: how long to keep, when to delete?

Vietnamese law both requires keeping data for years and deleting it once its purpose ends. How to untangle the keep–delete knot and build a retention schedule.

Read ↗

What "fines up to 5% of revenue" under PDPL really means

Deep dive

01.20.2026

What "fines up to 5% of revenue" under PDPL really means

The "5% of revenue" figure comes up a lot with PDPL. Understanding the actual penalty, which violations it applies to, and why it is a board issue.

Read ↗

A PDPL compliance checklist for businesses: what to do, who owns it, by when

Deep dive

01.12.2026

A PDPL compliance checklist for businesses: what to do, who owns it, by when

A PDPL compliance checklist grouped by workstream: each item states the task, the owner, the evidence to keep, and the statutory deadline under Law 91/2025 and Decree 356/2025.

Read ↗

PDPL compliance from 2026: why on-premise is the safer architecture

Cornerstone

01.05.2026

PDPL compliance from 2026: why on-premise is the safer architecture

Law 91/2025 and Decree 356/2025 are now in force. What the real duties are, how far on-premise helps, and where infrastructure cannot replace process.

Read ↗

Decree 356 guiding PDPL: turning the law into operational duties

News

12.31.2025

Decree 356 guiding PDPL: turning the law into operational duties

Decree 356/2025 guiding PDPL (effective 1 Jan 2026) makes duties concrete: impact assessment, DPO, 72-hour breach notice, cross-border transfers.

Read ↗

The National Data Center arrives: "data in-country" and the on-prem question

Deep dive

08.22.2025

The National Data Center arrives: "data in-country" and the on-prem question

The National Data Center going live signals one message: data should stay in-country. What that says for enterprise infrastructure strategy.

Read ↗

On-premise or cloud: choosing without losing data sovereignty

Cornerstone

07.08.2025

On-premise or cloud: choosing without losing data sovereignty

An honest on-premise vs cloud comparison across control, cost, speed and staffing, plus a decision framework by data type under Vietnamese law.

Read ↗

Data localization: why keeping data in-country is becoming the norm

Deep dive

03.10.2025

Data localization: why keeping data in-country is becoming the norm

International analysts note Vietnam tightening in-country data storage. Why this is a trend, and why on-premise is the natural consequence for businesses.

Read ↗

Free resource

Personal Data Protection checklist

Review your compliance with the law in force since 01/01/2026.

Get the checklist