6 principles on personal data protection from 2026

Lawyer Nguyen Thi Thuy, YouMe Law Firm LLC, replied:

Article 3 of the Law on Personal Data Protection 2025 (effective from January 1, 2026) stipulates the principles of personal data protection as follows:

1. Comply with the provisions of the Constitution, the provisions of this Law and other relevant legal provisions.

2. Only personal data can be collected and processed in accordance with specific and clear scope and purpose, ensuring compliance with legal regulations.

3. Ensure the accuracy of personal data and be edited, updated, or supplemented when necessary; be stored for a period of time appropriate to the purpose of personal data processing, unless otherwise provided by law.

4. Effectively and synchronously implement appropriate institutional, technical and human resources measures and solutions to protect personal data.

5. Proactively prevent, detect, stop, combat, and promptly and strictly handle all violations of the law on personal data protection.

6. Personal data protection is associated with protecting national and ethnic interests, serving socio-economic development, ensuring national defense, security and foreign affairs; ensuring harmony between personal data protection and protecting the legitimate rights and interests of agencies, organizations and individuals.

Thus, from January 1, 2026, the principle of personal data protection is implemented according to the above regulations.