Trust center / PDPD
PDPD compliance
PDPD is Vietnam's Personal Data Protection Decree, Decree 13/2023/ND-CP, effective 1 July 2023. Corpshore Vietnam processes all client personal data in line with the decree, with documented consent, data subject rights, cross-border transfer controls and a Data Protection Officer.
Regulatory context
Decree 13/2023/ND-CP is Vietnam's first comprehensive personal data protection regulation. It took effect on 1 July 2023 and is overseen by the Ministry of Public Security. The decree defines personal and sensitive data, sets a lawful basis and consent requirements for processing, establishes data subject rights, and imposes obligations for cross-border transfer, including an impact assessment.
How Corpshore Vietnam complies
Corpshore Vietnam treats PDPD as a baseline, not a hurdle. Every engagement processes personal data on a documented lawful basis, with consent captured and honoured, access restricted under least privilege, and processing logged for audit. Data subject requests are handled through a defined process in Vietnamese and English, and cross-border transfers carry the impact assessment and safeguards the decree requires.
Cross-border transfer
International clients regularly move data in and out of Vietnam. Corpshore Vietnam applies transfer controls and documentation so that movement stays within the decree, and coordinates with GDPR, HIPAA and other frameworks where the same data is subject to them. See our international compliance page for how these interlock.
Questions
Frequently asked
- What is Vietnam's PDPD?
- PDPD is Vietnam's Personal Data Protection Decree, Decree 13/2023/ND-CP, which took effect on 1 July 2023. It is Vietnam's first comprehensive personal data protection regulation, setting rules for processing, consent, data subject rights and cross-border transfer, overseen by the Ministry of Public Security.
- Is Corpshore Vietnam PDPD compliant?
- Yes. Corpshore Vietnam processes personal data in line with Decree 13/2023/ND-CP, with documented consent handling, data subject rights procedures, cross-border transfer controls and a Data Protection Officer point of contact. Compliance documentation is available for procurement review on request.
- How does PDPD affect cross-border data transfer?
- PDPD requires an impact assessment for cross-border transfers of Vietnamese personal data and appropriate safeguards. Corpshore Vietnam applies transfer controls and documentation so international clients can move data in and out of Vietnam within the decree's requirements.
- How do data subjects exercise their rights under PDPD?
- Under PDPD, data subjects can access, correct, delete and restrict processing of their personal data, and withdraw consent. Corpshore Vietnam operates a documented request process, in Vietnamese and English, routed through its Data Protection Officer contact.