Page 153 - ISC PROCEEDINGS 21.4

improper purposes, leading to serious consequences for individual rights and national
security.
This issue is also closely related to cybercrime, online fraud, and the misuse of
information in e-commerce activities. Recent incidents involving data breaches and
information leaks have increased public concern about this matter. Therefore, protecting
personal data is not only an individual responsibility but also a societal issue (Mantelero,
2016), requiring clear and effective legal and policy solutions.
In Vietnam, along with the rapid development of e-commerce, online services, and
technological applications, the collection and use of personal data have become
increasingly common. This requires a comprehensive, consistent, and effective legal
system to protect the rights of personal data subjects.
Currently, Vietnam has begun to pay attention to personal data protection through
several legal provisions, particularly in legal documents such as the Cybersecurity Law
(2025), the Law on Protection of Consumer Rights (2023), and Personal Data Protection
(2025), take effect on January 1, 2026. Although there are existing legal regulations, their
implementation in practice still faces many difficulties and challenges.
Vietnam is currently in the process of building and improving its personal data
protection legal system while simultaneously addressing issues related to the lack of
awareness and security practices among citizens, businesses, and authorities. Moreover,
in the context of deep international integration, Vietnam must adjust and develop its
legal system to comply with international standards, particularly commitments related to
personal data protection (Đan & Thắng, 2023). Despite the existence of legal provisions
on personal data protection, many theoretical and practical issues remain unresolved.
One major theoretical issue concerns how to accurately define the scope of personal data
in the context of rapidly developing information technologies. Distinguishing clearly
between personal information and public information, as well as between privacy rights
and public interests, remains a complex challenge in legislative development.
Another practical issue involves the monitoring and enforcement of compliance
with personal data protection laws. Regulatory authorities face significant difficulties in
detecting and handling violations of information security, especially in the online
environment where cyberattacks and fraud techniques are becoming increasingly
sophisticated.
Additionally, raising public awareness of personal data protection remains a major
challenge. Many citizens lack sufficient knowledge about protecting their personal
information online and about their legal rights when their data is violated. Furthermore,
international cooperation in personal data protection is also an important factor. Vietnam
must address the intersection between national and international legal systems,
especially regarding cross-border data transfers, which require effective international
cooperation mechanisms.
Therefore, personal data protection is a critical issue that directly affects the legitimate
rights and interests of individuals. In the digital era, violations of personal data can lead to
serious consequences affecting privacy, reputation, dignity, and even personal safety.
Moreover, Vietnam’s legal framework on personal data protection still contains
several shortcomings and has not kept pace with practical developments. Legal provisions
remain scattered and incomplete, making them difficult to apply consistently. Public and
corporate awareness of personal data protection also remains limited.

152