10 responsibilities of personal data controllers

Legal Consulting Office of Lao Dong Newspaper answers:

Clause 1, Article 37 of the 2025 Law on Personal Data Protection (effective from January 1, 2026) stipulates the responsibilities of the personal data controller as follows:

a) Clearly state the responsibilities, rights and obligations to be complied with of the parties in agreements and contracts related to personal data processing in accordance with the provisions of this Law and other relevant legal regulations;

b) Deciding on the purpose and means of processing personal data in documents, agreements with personal data subjects, ensuring compliance with principles and contents as prescribed by this Law;

c) Implement appropriate management and technical measures to protect personal data in accordance with the law, review and update these measures when necessary;

d) Notifying acts of violating regulations on personal data protection as prescribed in Article 23 of this Law;

e) Select the appropriate personal data processing party to process personal data;

e) Ensuring the rights of personal data subjects as prescribed in Article 4 of this Law;

g) Be responsible to the subject of personal data for the damage caused by the personal data processing process;

h) Preventing illegal personal data collection activities from their systems, equipment, and services;

i) Coordinate with the Ministry of Public Security, competent state agencies in protecting personal data, providing information to serve the investigation and handling of violations of the law on personal data protection;

k) Perform other responsibilities according to the provisions of this Law and other relevant legal regulations.

Thus, from January 1, 2026, the personal data controller has the above responsibilities.

It's a bit of a bit of a bit of a bit of a bit of a bit.