info@cbilaw.vn
+ (84) 028 3979 8855

DPIA & CTIA Filing Process and Procedures

Decree No. 356/2025/ND-CP provides specific regulations on the procedures for preparing and submitting the Personal Data Processing Impact Assessment (DPIA) dossier and the Cross-Border Transfer Impact Assessment (CTIA) dossier. Enterprises should pay particular attention to the filing deadlines, submission methods, assessment process and circumstances requiring dossier updates. CBI Law Firm summarizes the key requirements that...
Read More

A.I & DEEPFAKES – A NEW WEAPON IN SCAMS TARGETING BUSINESS LEADERS

As artificial intelligence (AI) continues to advance rapidly, Deepfake technology is being used in increasingly sophisticated ways to impersonate individuals’ appearances, voices, and identities, creating significant risks for both individuals and businesses. Notably, AI-powered scams can undermine traditional authentication methods, meaning that “seeing a face and hearing a voice” may no longer be sufficient to...
Read More

What Does a Personal Data Processing Impact Assessment (DPIA) Dossier Include? Guidance on Preparing a DPIA Dossier for Businesses

What documents are included in a DPIA dossier? CBI provides an overview of the key components, preparation requirements, and important considerations when preparing a Personal Data Processing Impact Assessment (DPIA) dossier under the Law on Personal Data Protection and Decree No. 356/2025/ND-CP. Illustrative image 1. Legal Basis for the Components of a DPIA Dossier Pursuant...
Read More

Cross-Border Personal Data Transfer Impact Assessment (CTIA): Detailed Guidance for Businesses

What is CTIA? CBI provides an overview of the latest regulations on the legal basis, requirements, and procedures for preparing a Cross-Border Personal Data Transfer Impact Assessment (CTIA) dossier, helping businesses proactively comply with applicable regulations and manage risks associated with cross-border data transfers. Illustrative image 1. Legal Basis and Concept of CTIA A Cross-Border...
Read More

What is Personal Data Processing Impact Assessment (DPIA)?

Is DPIA a mandatory legal obligation or a risk management solution? Join CBI in exploring the legal basis, implementation process, and DPIA documentation requirements under applicable regulations, helping businesses proactively ensure compliance and manage personal data protection risks in the article below. Illustrative image 1. Legal Basis Relevant to Personal Data Processing Impact Assessment (DPIA)...
Read More

New regulations on electronic identification and authentication for foreign nationals in Vietnam

CBI Law Firm is pleased to provide an update on the new regulations governing electronic identification and authentication for foreign nationals in Vietnam, which will take effect from 28 September 2026. The new regulations introduce notable changes concerning the issuance, management and use of electronic identification accounts by foreign nationals in Vietnam. For further details...
Read More

Amendment of the Investment Registration Certificate (IRC): Key issues enterprises should note under the new regulations

During the implementation of an investment project, enterprises often encounter the need to modify the project location, investment capital, operational objectives, or implementation schedule. However, many businesses focus solely on carrying out procedures related to their business operations without reviewing their obligation to amend the Investment Registration Certificate (IRC) to reflect such changes. Failure to...
Read More

56 Business Sectors Removed from the List of Conditional Business Lines – A New Step Forward in Vietnam’s Business Regulatory Reform

In light of recent regulatory reforms relating to conditional business lines in Vietnam, the comparison table below provides an overview of the changes introduced under the 2025 Law on Investment and Resolution No. 66.17/2026/NQ-CP. By highlighting business lines that have been retained, amended, supplemented or removed, the comparison assists enterprises, investors and other stakeholders in...
Read More

Legal consequences in the event that a shareholder fails to pay, or fails to fully pay, for the shares subscribed upon the establishment of a joint-stock company

The full and timely payment of the subscribed shares constitutes a mandatory obligation of shareholders upon the incorporation of a joint stock company. Under the Law on Enterprises 2020, any failure to fulfill this obligation not only gives rise to the shareholder’s liability but also places the company in a position where it must undertake...
Read More