{"id":2650,"date":"2022-12-16T11:26:45","date_gmt":"2022-12-16T04:26:45","guid":{"rendered":"https:\/\/cdlaf.az9s.group\/?page_id=2650"},"modified":"2025-07-18T15:37:13","modified_gmt":"2025-07-18T08:37:13","slug":"personal-data","status":"publish","type":"page","link":"https:\/\/cd.az9s.com\/en\/expertises\/personal-data\/","title":{"rendered":"Personal Data"},"content":{"rendered":"<div class=\"az-fs-block az-fs-block-2633\"><div class=\"az-fs-section ct_banner banner_bg\" style=\"padding:0px\"><div class=\"az-fs-banner\"><div class=\"az-fs-text-box text-left\"><div class=\"ux-text text-center\"><p><h1>Personal Data<\/h1><\/p><\/div><\/div><\/div><\/div><\/div>\n<div class=\"az-fs-section dv_thongtin\" style=\"padding:80px\"><div class=\"az-fs-row\"><\/p>\n<div class=\"az-fs-col\"><div class=\"ux-text title-dichvu\"><p><h2>Personal Data<\/h2><p><span style=\"color: #d83131\"><strong>Personal Data Services \u2013 Comprehensive Compliance Solutions by CDLAF<\/strong><\/span><\/p><p>In the context of Decree No. 13\/2023\/N\u0110-CP having come into force and the Personal Data Protection Law being finalized, enterprises \u2014 particularly \u00a0FDI enterprises , multinational corporations, and organizations with large-scale data processing operations \u2014 are now subject to mandatory and stringent compliance requirements under Vietnam\u2019s personal data protection laws.<\/p><p><strong>CDLAF provides a comprehensive Personal Data Services system<\/strong>, supporting enterprises from the assessment phase through to the implementation of policies, technical measures, internal training, and legal compliance assurance, including:<\/p><ol><li><strong> Personal Data Compliance Status Assessment<\/strong><\/li><\/ol><ul><li>Conduct a comprehensive review of all categories of personal data collected, used, stored, or shared by the organization.<\/li><li>Prepare internal and third-party data flow mapping (data flow mapping) \u2014 clearly specifying the entities responsible for the collection, processing, transfer, and storage of personal data.<\/li><li>Inspect data storage systems, access control mechanisms, and software in use, and assess the current level of security.<\/li><li>Evaluate the awareness and responsibilities of personnel involved in personal data processing.<\/li><li>Record instances of non-compliance and identify potential legal risks \u2014 from unauthorized access to the absence of valid legal bases for processing.<\/li><\/ul><ol start=\"2\"><li><strong> Development of Data Protection Policy and Framework<\/strong><\/li><\/ol><ul><li>Draft or update the Personal Data Protection Policy in accordance with legal requirements and the organization\u2019s actual operations.<\/li><li>Design or revise internal procedures (SOPs) for all stages of data collection, processing, sharing, and deletion.<\/li><li>Establish procedures for responding to data subjects\u2019 requests: access, withdrawal of consent, rectification, and complaints.<\/li><li>Establish data retention periods and set principles for data classification to ensure appropriate processing.<\/li><li>Clearly assign roles and responsibilities among departments, and appoint or designate DPOs or internal contact points in charge of data matters.<\/li><\/ul><ol start=\"3\"><li><strong> Implementation of Technical and Organizational Measures<\/strong><\/li><\/ol><ul><li>Establish data access control mechanisms: role-based access permissions, multi-factor authentication, and access log recording.<\/li><li>Apply encryption measures for sensitive data both at rest and in transit.<\/li><li>Install endpoint security software, anti-malware solutions, and set up secure backup systems.<\/li><li>Implement data minimization techniques and anonymization where identifiable information is not required.<\/li><li>Conduct regular security audits to identify technical vulnerabilities or operational non-compliance.<\/li><\/ul><ol start=\"4\"><li><strong> Training and Capacity Building on Personal Data Management<\/strong><\/li><\/ol><ul><li>Develop internal training materials, data protection handbooks, instructional videos, or specialized FAQs.<\/li><li>Organize onboarding training for new employees and conduct regular quarterly or annual training programs.<\/li><li>Provide specialized training for departments with high levels of data exposure, such as HR, IT, marketing, and customer service.<\/li><li>Simulate real-world scenarios, such as data breaches or improper access requests, to test staff awareness and response readiness.<\/li><li>Measure training outcomes through short assessments or internal evaluations.<\/li><\/ul><ol start=\"5\"><li><strong> Legal Compliance Advisory and Legal Documentation Support<\/strong><\/li><\/ol><ul><li>Review and ensure that all data processing activities have a clear legal basis: consent, contracts, legal obligations, or other grounds as prescribed by law.<\/li><li>Draft or revise legal documents, including confidentiality clauses in employment contracts, outsourcing agreements, and Data Processing Agreements (DPAs) with partners.<\/li><li>Standardize privacy notices, consent forms, and internal documentation related to personal data.<\/li><li>Provide legal advice on handling specific situations such as data breaches, data subject complaints, or inspections by regulatory authorities.<\/li><li>Ensure compliance in parallel with other applicable laws, such as the Cybersecurity Law and the GDPR (where international factors are involved).<\/li><\/ul><ol start=\"6\"><li><strong> Conducting Personal Data Impact Assessment (DPIA)<\/strong><\/li><\/ol><ul><li>Prepare a complete impact assessment dossier in accordance with Form No. 4 issued under Decree 13.<\/li><li>Analyze all processing activities to identify potential risks affecting the rights and legitimate interests of data subjects.<\/li><li>Propose risk mitigation measures, control mechanisms, and privacy protection solutions.<\/li><li>Applicable to enterprises engaging in the processing of sensitive data, large-scale data operations, high-tech activities, or automated decision-making.<\/li><\/ul><ol start=\"7\"><li><strong> Advisory and Preparation of Cross-Border Personal Data Transfer Assessment Dossier<\/strong><\/li><\/ol><ul><li>Identify legal conditions for lawful data transfer in accordance with Vietnamese regulations.<\/li><li>Prepare the cross-border data transfer impact assessment dossier following Form No. 5 .<\/li><li>Assist enterprises in submitting the dossier to the Ministry of Public Security, monitoring feedback, and providing updates or amendments as required.<\/li><li>Advise on integrating cross-border data transfer provisions intoDPAs, SCCs, or internal policies to meet international legal inspection requirements.<\/li><\/ul><p><strong>Why choose CDLAF?<\/strong><\/p><ul><li>A team of lawyers with in-depth knowledge of Vietnamese law and international standards such as GDPR, APPI, and LGPD<\/li><li>Proven experience supporting FDI enterprises, multinational corporations, banks, technology firms, and e-commerce businesses<\/li><li>Practical, flexible, and easily implementable solutions tailored to each organizational model<\/li><\/ul><p><span style=\"color: #d83131\"><strong><em>Contact CDLAF to develop a personal data compliance system suited to your organization\u2019s scale and industry.<\/em><\/strong><\/span><\/p><\/p><\/div>\n<p><\/div><div class=\"az-fs-col col-sticky-sb\"><\/p><\/div>\n<p><\/div>\n<p><\/div><div class=\"az-fs-section st_blog_new st_blog_cdv\" style=\"padding:80px\"><\/p>\n<div class=\"az-fs-row\"><\/p>\n<div class=\"az-fs-col\"><div class=\"ux-text title-dichvu\"><p><h2>Services about Personal Data CDLAF provided<\/h2><\/p><\/div>\n<p><\/div><div class=\"az-fs-col col-dv-padding\"><\/p>\n<div class=\"az-fs-blog-posts az-fs-blog-posts-cols-3 text-left\"><article class=\"az-fs-blog-post\"><a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/preparation-of-the-data-transfer-impact-assessment-dossier-for-cross-border-transfers-of-personal-data\/\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"512\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-768x512.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-768x512.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-600x400.jpg 600w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-1200x800.jpg 1200w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-1536x1024.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-2048x1365.jpg 2048w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a><h3><a href=\"https:\/\/cd.az9s.com\/en\/preparation-of-the-data-transfer-impact-assessment-dossier-for-cross-border-transfers-of-personal-data\/\">Preparation of the Data Transfer Impact Assessment Dossier for Cross-Border Transfers of Personal Data<\/a><\/h3><p>Cross-Border Data Protection \u2013 Ensuring Legal Compliance \u2013 Enhancing International Transparency CDLAF assists enterprises in preparing the&hellip;<\/p><\/article><article class=\"az-fs-blog-post\"><a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/preparation-of-personal-data-processing-impact-assessment-pda\/\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"512\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-768x512.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-768x512.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-600x400.jpg 600w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-1200x800.jpg 1200w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-1536x1024.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-2048x1365.jpg 2048w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a><h3><a href=\"https:\/\/cd.az9s.com\/en\/preparation-of-personal-data-processing-impact-assessment-pda\/\">Preparation of Personal Data Processing Impact Assessment (PDA)<\/a><\/h3><p>Identify risks \u2013 Demonstrate accountability \u2013 Proactively comply CDLAF accompanies businesses in fulfilling all legal obligations in&hellip;<\/p><\/article><article class=\"az-fs-blog-post\"><a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/training-and-capacity-building-for-personal-data-compliance\/\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"509\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-768x509.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-768x509.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-604x400.jpg 604w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-1208x800.jpg 1208w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-1536x1018.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-2048x1357.jpg 2048w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a><h3><a href=\"https:\/\/cd.az9s.com\/en\/training-and-capacity-building-for-personal-data-compliance\/\">Training and Capacity Building for Personal Data Compliance<\/a><\/h3><p>Build Knowledge \u2013 Standardize Behavior \u2013 Strengthen Data Risk Management Amidst an increasingly tightening legal framework \u2014from&hellip;<\/p><\/article><\/div>\n<p><\/div><div class=\"az-fs-col\"><\/p>\n<div>            <div class=\"az-fs-ajax-load-more\" id=\"az-alm-888838\" data-page-size=\"3\">\n                <div class=\"az-fs-blog-posts az-fs-blog-posts-cols-3\">\n                                            <article class=\"az-fs-blog-post \">\n                                                            <a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/preparation-of-the-data-transfer-impact-assessment-dossier-for-cross-border-transfers-of-personal-data\/\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"512\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-768x512.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-768x512.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-600x400.jpg 600w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-1200x800.jpg 1200w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-1536x1024.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/07\/pexels-andrea-piacquadio-3760081-2048x1365.jpg 2048w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a>\n                                                        <h3><a href=\"https:\/\/cd.az9s.com\/en\/preparation-of-the-data-transfer-impact-assessment-dossier-for-cross-border-transfers-of-personal-data\/\">Preparation of the Data Transfer Impact Assessment Dossier for Cross-Border Transfers of Personal Data<\/a><\/h3>\n                            <p>Cross-Border Data Protection \u2013 Ensuring Legal Compliance \u2013 Enhancing International Transparency CDLAF assists enterprises in preparing the&hellip;<\/p>\n                        <\/article>\n                                                                    <article class=\"az-fs-blog-post \">\n                                                            <a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/preparation-of-personal-data-processing-impact-assessment-pda\/\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"512\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-768x512.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-768x512.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-600x400.jpg 600w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-1200x800.jpg 1200w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-1536x1024.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/02\/pexels-asphotograpy-101808-2048x1365.jpg 2048w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a>\n                                                        <h3><a href=\"https:\/\/cd.az9s.com\/en\/preparation-of-personal-data-processing-impact-assessment-pda\/\">Preparation of Personal Data Processing Impact Assessment (PDA)<\/a><\/h3>\n                            <p>Identify risks \u2013 Demonstrate accountability \u2013 Proactively comply CDLAF accompanies businesses in fulfilling all legal obligations in&hellip;<\/p>\n                        <\/article>\n                                                                    <article class=\"az-fs-blog-post \">\n                                                            <a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/training-and-capacity-building-for-personal-data-compliance\/\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"509\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-768x509.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-768x509.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-604x400.jpg 604w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-1208x800.jpg 1208w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-1536x1018.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/07\/pexels-goumbik-577210-1-2048x1357.jpg 2048w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a>\n                                                        <h3><a href=\"https:\/\/cd.az9s.com\/en\/training-and-capacity-building-for-personal-data-compliance\/\">Training and Capacity Building for Personal Data Compliance<\/a><\/h3>\n                            <p>Build Knowledge \u2013 Standardize Behavior \u2013 Strengthen Data Risk Management Amidst an increasingly tightening legal framework \u2014from&hellip;<\/p>\n                        <\/article>\n                                                                    <article class=\"az-fs-blog-post is-hidden\">\n                                                            <a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/building-a-personal-data-protection-policy-and-governance-framework\/\"><img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"432\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/03\/SERVICE-768x432.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/03\/SERVICE-768x432.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/03\/SERVICE-711x400.jpg 711w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/03\/SERVICE-1400x788.jpg 1400w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/03\/SERVICE-1536x864.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2025\/03\/SERVICE-2048x1152.jpg 2048w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a>\n                                                        <h3><a href=\"https:\/\/cd.az9s.com\/en\/building-a-personal-data-protection-policy-and-governance-framework\/\">Building a Personal Data Protection Policy and Governance Framework<\/a><\/h3>\n                            <p>Identify Risks \u2013 Standardize Systems \u2013 Ensure Legal Compliance CDLAF supports businesses in building a comprehensive personal&hellip;<\/p>\n                        <\/article>\n                                                                    <article class=\"az-fs-blog-post is-hidden\">\n                                                            <a class=\"az-fs-blog-thumb image-cover\" style=\"padding-top:56.25%\" href=\"https:\/\/cd.az9s.com\/en\/personal-data-compliance-assessment-service\/\"><img loading=\"lazy\" decoding=\"async\" width=\"724\" height=\"400\" src=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/09\/shutterstock_2072635079-1-724x400-1.jpg\" class=\"attachment-medium_large size-medium_large wp-post-image\" alt=\"\" \/><\/a>\n                                                        <h3><a href=\"https:\/\/cd.az9s.com\/en\/personal-data-compliance-assessment-service\/\">Personal data compliance assessment service<\/a><\/h3>\n                            <p>Risk identification \u2013 System review \u2013 Legal compliance readiness Decree No. 13\/2023\/N\u0110-CP on personal data protection has&hellip;<\/p>\n                        <\/article>\n                                                            <\/div>\n                                    <button type=\"button\" class=\"az-fs-load-more-button\">Load more<\/button>\n                            <\/div>\n            <\/div><\/div>\n<p><\/div><\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":4,"featured_media":0,"parent":2699,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-transparent-header.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2650","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/pages\/2650","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/comments?post=2650"}],"version-history":[{"count":5,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/pages\/2650\/revisions"}],"predecessor-version":[{"id":12473,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/pages\/2650\/revisions\/12473"}],"up":[{"embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/pages\/2699"}],"wp:attachment":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/media?parent=2650"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}