1. Ensuring compliance with the Constitution, this Law, and relevant laws.

2. Ensuring that personal data is only collected and processed within a specific, clear, and lawful scope and purpose.

3. Ensuring that personal data’s accuracy is ensured, and such data is modified, updated, supplemented (if necessary), and stored for a period in conformity with the personal data processing purpose unless otherwise prescribed by the law.

4. Ensuring that institutional, technical, and human measures and solutions are synchronously and effectively implemented to protect personal data.

5. Ensuring proactive prevention, detection, combat, and timely and strict handling of all violations against personal protection laws.

6. Ensuring that personal data protection aligns with national benefits, supports socio-economic development, ensures national defense, security, and foreign affairs; ensuring harmony between personal data protection and the protection of legitimate rights and benefits of agencies, organizations, and individuals.

1. Processing personal data to oppose the Socialist Republic of Vietnam or in ways that affect national defense, security, social order, safety, and legitimate rights and benefits of agencies, organizations, and individuals.

2. Obstructing personal data protection activities.

3. Taking advantage of personal data protection activities to violate the law.

4. Processing personal data against the law.

5. Using personal data of others and/or letting others use one’s personal data to violate the law.

6. Trading personal data unless otherwise prescribed by the law.

7. Appropriating, intentionally leaking, or causing the loss of personal data.