Page 159 - ISC PROCEEDINGS 21.4

By using legal analysis and comparative legal analysis, the paper has shown that
foreign legal systems offer useful lessons, but that Vietnam should adapt rather than
mechanically replicate them. Vietnam should focus on improving the coherence and
enforceability of the existing legal regime on personal data protection, especially in
relation to consent, corporate accountability, data breach notification, sanctions, and
institutional coordination. In this way, the paper contributes not only a general overview
of the legal framework, but a more focused analysis of the structural issues that continue
to affect personal data protection in business practice in Vietnam.

References
[1]. Anshari, M., Almunawar, M. N., Lim, S. A., & Al-Mudimigh, A. (2019). Customer
relationship management and big data enabled: Personalization & customization of
services. Applied Computing and Informatics, 15(2), 94–101.
[2]. Birch, K., Cochrane, D. T., & Ward, C. (2021). Data as asset? The measurement,
governance, and valuation of digital personal data by Big Tech. Big Data & Society, 8(1),
20539517211017308.
[3]. Boyne, S. M. (2018). Data protection in the United States. The American Journal
of Comparative Law, 66(suppl_1), 299–343.
[4]. Chik, W. B. (2013). The Singapore Personal Data Protection Act and an
assessment of future trends in data privacy reform. Computer Law & Security Review,
29(5), 554–575.
[5]. Dan, P. T., & Thang, D. D. (2023). Personal data protection: The “right to be
forgotten” under European Union regulations and some recommendations for Vietnam.
Journal of Procuracy Science, 6(68).
[6] Dien, N. N. (2006). Some theoretical issues on methods of statutory law analysis.
Justice Publishing House, Hanoi, Vietnam.
[7]. Frankenreiter, J., & Livermore, M. A. (2020). Computational methods in legal
analysis. Annual Review of Law and Social Science, 16(1), 39–57.
[8]. Hoofnagle, C. J., Van Der Sloot, B., & Borgesius, F. Z. (2019). The European Union
general data protection regulation: what it is and what it means. Information &
Communications Technology Law, 28(1), 65–98.
[9]. Illman, E., & Temple, P. (2019). California consumer privacy act. The Business
Lawyer, 75(1), 1637–1646.
[10]. Ko, H., Leitner, J., Kim, E., & Jeong, J. (2017). Structure and enforcement of
data privacy law in South Korea. International Data Privacy Law, 7(2), 100–114.
[11]. Korobkin, R. (2002). The Endowment Effect and Legal Analysis. Nw. UL Rev., 97,
1227.
[12]. Mantelero, A. (2016). Personal data for decisional purposes in the age of
analytics: From an individual to a collective dimension of data protection. Computer Law
& Security Review, 32(2), 238–255.
[13]. Michaels, R. (2006). The Functional Method of Comparative Law. The Oxford
Handbook of Comparative Law/Oxford University Press.
[14]. Miyashita, H. (2021). Human-centric data protection laws and policies: A
lesson from Japan. Computer Law & Security Review, 40, 105487.
[15]. Mugariri, P., Abdullah, H., Garcia-Torres, M., Parameshchari, B. D., & Abdul
Sattar, K. N. (2022). Promoting information privacy protection awareness for the internet
of things (IoT). Mobile Information Systems, 2022(1), 4247651.

158