Protection of personal data in artificial intelligence processing

Legal Consulting Office of Lao Dong Newspaper answers:

Article 30 of the 2025 Law on Personal Data Protection (effective from January 1, 2026) stipulates the protection of personal data in big data processing, artificial intelligence, blockchain, virtual universe, and cloud computing as follows:

1. Personal data in the big data environment, artificial intelligence, blockchain, virtual universe and cloud computing must be processed for the right purpose and limited within the necessary scope, ensuring the legitimate rights and interests of the owner of personal data.

2. The processing of personal data in the big data environment, artificial intelligence, blockchain, virtual universe and cloud computing must comply with the provisions of this Law and other relevant legal regulations; in accordance with ethical standards and fine customs of Vietnam.

3. Systems and services using big data, artificial intelligence, blockchain, virtual universe and cloud computing must be integrated with appropriate personal data security measures; must use appropriate authentication and identification methods and decentralization of access to process personal data.

4. Personal data processing using artificial intelligence must be classified by risk level to have appropriate measures to protect personal data.

5. Do not use or develop big data processing systems, artificial intelligence, blockchain, virtual universe, cloud computing that use personal data to cause damage to national defense, national security, social order and safety or infringe upon the lives, health, honor, dignity, and property of others.

6. The Government specifies this Article.

Thus, from January 1, 2026, the protection of personal data in artificial intelligence processing is regulated as above.

See the original here