Latest personal data request form in Vietnam according to current regulations?
The latest personal data request form in Vietnam?
The personal data request form for individuals is Form No. 01 issued together with Decree No. 13/2023/ND-CP.
Download the personal data request form for individuals: Click here.
Latest personal data request form in Vietnam according to current regulations?
What does general personal data in Vietnam include?
Pursuant to Clause 3, Article 2 of Decree No. 13/2023/ND-CP, general personal data includes the following information:
- Last name, middle name and first name, other names (if any);
- Date of birth; date of death or going missing;
- Gender;
- Place of birth, registered place of birth; place of permanent residence; place of temporary residence; current place of residence; hometown; contact address;
- Nationality;
- Personal image;
- Phone number; ID Card number, personal identification number, passport number, driver’s license number, license plate, taxpayer identification number, social security number and health insurance card number;
- Marital status;
- Information about the individual’s family relationship (parents, children);
- Digital account information; personal data that reflects activities and activity history in cyberspace;
- Information associated with an individual or used to identify an individual other than that specified in Clause 4, Article 2 of Decree No. 13/2023/ND-CP.
What are the rights of data subjects in the protection of personal data in Vietnam?
Pursuant to Article 9 of Decree No. 13/2023/ND-CP, in protection of personal data in Vietnam, data subjects have the following rights:
- Firstly, right to be informed
The data subject has the right to be informed of his/her personal data processing, unless otherwise provided for by law.
- Secondly, right to give consent
The data subject has the right to give consent to the processing of his/her personal data, other than cases specified in Article 17 of this Decree.
- Thirdly, right to access personal data
The data subject has the right to access his/her personal data in order to look at, rectify or request rectification of his/her personal data, unless otherwise provided for by law.
- Fourthly, right to withdraw consent
The data subject has the right to withdraw his/her consent, unless otherwise provided for by law.
- Fifthly, right to delete personal data
The data subject has the right to delete or request deletion of his/her personal data, unless otherwise provided for by law.
- Sixthly, right to obtain restriction on processing
+ The data subject has the right to obtain restriction on the processing of his/her personal data, unless otherwise provided for by law.
+ The restriction on the processing of personal data shall be implemented within 72 hours after receiving request of the data subject, and all personal data that the data subject requests the restriction, unless otherwise provided for by law.
- Seventhly, right to obtain personal data
The data subject has the right to request the Personal Data Controller and the Personal Data Controller-cum-Processor to provide him/her with his/her personal data, unless otherwise provided for by law.
- Eighthly, right to object to processing
+ The data subject has the right to object to the Personal Data Controller and the Personal Data Controller-cum-Processor processing his/her personal data in order to prevent or restrict the disclosure of personal data or the use of personal data for advertising and marketing purposes, unless otherwise provided for by law.
+ The Personal Data Controller and the Personal Data Controller-cum-Processor shall comply with the data subject’s request within 72 hours after receiving the request, unless otherwise provided for by law.
- Ninethly, right to file complaints, denunciations and lawsuits
The data subject has the right to file complaints, denunciations and lawsuits as prescribed by law.
- Tenthly, right to claim damage
The data subject has the right to claim damage as prescribed by law when there are violations against regulations on protection of his/her personal data, unless otherwise agreed by parties or unless otherwise prescribed by law.
- Finally, right to self-protection
The data subject has the right to self-protection according to regulations in the Civil Code, other relevant laws and Decree No. 13/2023/ND-CP, or request competent agencies and organizations to implement civil right protection methods according to regulations in Article 11 of the Civil Code.
What are the obligations of data subjects in the protection of personal data in Vietnam?
Pursuant to Article 10 of Decree No. 13/2023/ND-CP, in the protection of personal data in Vietnam, data subjects have the following obligations:
- Protect his/her own personal data; request relevant organizations and individuals to protect his/her personal data.
- Respect and protect others’ personal data.
- Fully and accurately provide his/her personal data when he/she consents to the processing.
- Participate in dissemination of personal data protection skills.
- Comply with regulations of law on protection of personal data and prevent violations against regulations on protection of personal data.
Decree No. 13/2023/ND-CP takes effect from July 1, 2023.
LawNet
