Penalties for Personal Data Protection Violations: What Risks Do Enterprises Face?
Decree No. 330/2026/ND-CP officially took effect on 19 August 2026, providing regulations on administrative penalties for violations in the fields of cybersecurity and personal data protection. Notably, certain violations may be subject to fines of up to VND 3 billion, ten (10) times the illicit proceeds, or 5% of revenue, together with remedial measures such... Read More
DPIA & CTIA Filing Process and Procedures
Decree No. 356/2025/ND-CP provides specific regulations on the procedures for preparing and submitting the Personal Data Processing Impact Assessment (DPIA) dossier and the Cross-Border Transfer Impact Assessment (CTIA) dossier. Enterprises should pay particular attention to the filing deadlines, submission methods, assessment process and circumstances requiring dossier updates. CBI Law Firm summarizes the key requirements that... Read More
Which Enterprises Are Exempt from Preparing a DPIA Under the Latest Regulations?
Which enterprises are exempt from, or may elect not to perform, the obligations to prepare, update and submit a Personal Data Processing Impact Assessment (DPIA) dossier? CBI Law Firm provides an update on the exemptions, deferrals and exceptions under the 2025 Law on Personal Data Protection and Decree No. 356/2025/ND-CP. Illustrative image 1. Legal Basis... Read More
What Does a Personal Data Processing Impact Assessment (DPIA) Dossier Include? Guidance on Preparing a DPIA Dossier for Businesses
What documents are included in a DPIA dossier? CBI provides an overview of the key components, preparation requirements, and important considerations when preparing a Personal Data Processing Impact Assessment (DPIA) dossier under the Law on Personal Data Protection and Decree No. 356/2025/ND-CP. Illustrative image 1. Legal Basis for the Components of a DPIA Dossier Pursuant... Read More
Cross-Border Personal Data Transfer Impact Assessment (CTIA): Detailed Guidance for Businesses
What is CTIA? CBI provides an overview of the latest regulations on the legal basis, requirements, and procedures for preparing a Cross-Border Personal Data Transfer Impact Assessment (CTIA) dossier, helping businesses proactively comply with applicable regulations and manage risks associated with cross-border data transfers. Illustrative image 1. Legal Basis and Concept of CTIA A Cross-Border... Read More
What is Personal Data Processing Impact Assessment (DPIA)?
Is DPIA a mandatory legal obligation or a risk management solution? Join CBI in exploring the legal basis, implementation process, and DPIA documentation requirements under applicable regulations, helping businesses proactively ensure compliance and manage personal data protection risks in the article below. Illustrative image 1. Legal Basis Relevant to Personal Data Processing Impact Assessment (DPIA)... Read More
New regulations on electronic identification and authentication for foreign nationals in Vietnam
CBI Law Firm is pleased to provide an update on the new regulations governing electronic identification and authentication for foreign nationals in Vietnam, which will take effect from 28 September 2026. The new regulations introduce notable changes concerning the issuance, management and use of electronic identification accounts by foreign nationals in Vietnam. For further details... Read More
Amendment of the Investment Registration Certificate (IRC): Key issues enterprises should note under the new regulations
During the implementation of an investment project, enterprises often encounter the need to modify the project location, investment capital, operational objectives, or implementation schedule. However, many businesses focus solely on carrying out procedures related to their business operations without reviewing their obligation to amend the Investment Registration Certificate (IRC) to reflect such changes. Failure to... Read More
56 Business Sectors Removed from the List of Conditional Business Lines – A New Step Forward in Vietnam’s Business Regulatory Reform
In light of recent regulatory reforms relating to conditional business lines in Vietnam, the comparison table below provides an overview of the changes introduced under the 2025 Law on Investment and Resolution No. 66.17/2026/NQ-CP. By highlighting business lines that have been retained, amended, supplemented or removed, the comparison assists enterprises, investors and other stakeholders in... Read More
Legal consequences in the event that a shareholder fails to pay, or fails to fully pay, for the shares subscribed upon the establishment of a joint-stock company
The full and timely payment of the subscribed shares constitutes a mandatory obligation of shareholders upon the incorporation of a joint stock company. Under the Law on Enterprises 2020, any failure to fulfill this obligation not only gives rise to the shareholder’s liability but also places the company in a position where it must undertake... Read More