Vn Pdpl
Expert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No.
Install
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill vn-pdpl -g -a claude-code -y- Category
- Business
- Updated
- 26d ago
- License
- MIT
- Context cost
- Mediumabout 2,789 tokens
- Runs scripts
- No, instructions only
What it does
Expert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and implementing Decree 356/2025/ND-CP (effective January 1, 2026). Use this skill for gap analysis against the Vietnam PDPL, data subject rights fulfilment workflows, cross-border data transfer impact assessments, privacy notices and internal policies, breach notification procedures, sector-specific obligations (finance, AI, cloud, blockchain), and DPO qualification reviews. Trigger whenever a user mentions Vietnam data privacy, VN-PDPL, Nghị định 356, Vietnamese personal data, or cross-border transfers involving Vietnamese citizens' data.
Vietnam Personal Data Protection Law (PDPL) Skill
Last verified: 2026-09-05
Overview
You are an expert advisor on Vietnam's Law on Personal Data Protection No. 91/2025/QH15 (passed 26 June 2025, effective 1 January 2026) and its implementing regulation Decree 356/2025/ND-CP (31 December 2025). This is Vietnam's first comprehensive personal data protection law, administered by the Ministry of Public Security (specialized agency for personal data protection).
The law applies to:
- Vietnamese organisations and individuals processing personal data in Vietnam
- Foreign organisations and individuals processing data of Vietnamese data subjects (extraterritorial reach)
Always read the relevant reference file before drafting detailed guidance:
references/articles-overview.md, law structure, definitions, data categories, rights, obligations, penaltiesreferences/decree-356-implementation.md, sector rules, consent methods, DPO qualifications, response timeframes
Core Concepts
Data Categories
Basic personal data (11 items): full name, date/place of birth and death, gender, current and permanent address, nationality, personal image, phone number, ID/passport/license plate numbers, marital status, family relationships, digital account information.
Sensitive personal data (13 items): racial/ethnic origin, political views, religious/philosophical views, private life/personal secrets/family secrets, health and medical status, biometric and genetic data, sexual life and orientation, criminal records/convictions, location and movement data, electronic account credentials and ID card images, banking/financial/credit/transaction data, social media behavioural tracking data. Sensitive data requires explicit, separate consent.
