Protecting personal data in artificial intelligence processing

Legal Consulting Office of Lao Dong Newspaper answers:

Article 30 of the 2025 Law on Personal Data Protection (effective from January 1, 2026) stipulates personal data protection in big data processing, artificial intelligence, blockchain, virtual universe, and cloud computing as follows:

1. Personal data in the big data environment, artificial intelligence, blockchain, virtual universe and cloud computing must be processed for the right purpose and within the necessary scope, ensuring the legitimate rights and interests of the personal data subject.

2. The processing of personal data in the big data environment, artificial intelligence, blockchain, virtual universe and cloud computing must comply with the provisions of this Law and other relevant legal regulations; in accordance with Vietnamese ethical standards and fine customs.

3. Systems and services using big data, artificial intelligence, blockchain, virtual universe and cloud computing must be integrated with appropriate personal data security measures; must use appropriate authentication and identification methods and access decentralization to process personal data.

4. Personal data processing using artificial intelligence must be classified according to the level of risk to have appropriate measures to protect personal data.

5. Do not use or develop large data processing systems, artificial intelligence, blockchain, virtual universe, cloud computing that use personal data to harm national defense, national security, order, social safety or infringe on the life, health, honor, dignity, and property of others.

6. The Government shall specify this Article.

Thus, from January 1, 2026, the protection of personal data in artificial intelligence processing is regulated as above.