Thi Phuong Cham Nguyen

Type of the article: Research Article

The rapid development of digital transformation, artificial intelligence, and data-driven economic models has heightened concerns about personal data protection and social responsibility in Vietnam. In this context, this study aims to assess Vietnam’s legal framework for personal data protection and propose policy reforms to enhance social responsibility. Social responsibility is understood as responsible data governance achieved through the implementation of principles of transparency and accountability, thereby enhancing trust, and through risk-based governance that both respects traditional rights and ensures that data flows are not hindered in the digital context. The study employs theoretical legal analysis and comparative law methods to examine comprehensive legal frameworks for personal data protection, particularly Vietnam’s Personal Data Protection Law 2025 and Japan’s Personal Information Protection Law. The results show that Vietnam’s personal data protection regime remains hampered by fragmented regulations and an overly consent-based approach, and that the fundamental principles of the legal framework for protecting personal data are merely symbolic and formal on paper due to weak enforcement and monitoring mechanisms. In contrast, Japan’s experience demonstrates the effectiveness of a centralized supervisory body, a guidance-based management model, risk-based governance, and regular legal review cycles in promoting socially responsible data use. Based on these findings, the study proposes policy recommendations for Vietnam, focusing on improving the structure of a synchronized and unified legal framework for personal data protection; establishing a data governance mechanism based on risk management principles; and creating an independent agency to coordinate the development, monitoring, and implementation of the law nationwide.