#36 Data Protection Officers: the gatekeepers of personal data within enterprises

Pursuant to the Law on Personal data protection 2025 (“PDPL 2025”), agencies and organizations are responsible for appointing a department or personnel with sufficient qualifications and capacity to protect personal data or engaging organizations or individuals to provide personal data protection services.However, in practice, many enterprises encounter the same concern when implementing this requirement: who should be designated as the appropriate focal point to perform as Data Protection Officer (“DPO”)? Should it be the Legal Department, the Information Technology Department, the Human Resources Department, or a dedicated specialized unit? The selection of an appropriate model not only affects compliance effectiveness but also directly impacts how data is managed and operated within the enterprise.In today’s episode, we will discuss 03 key issues, as follows:(i) The possible organizational models that enterprises may adopt for the DPO?;(ii) The requirements and qualifications that DPO must satisfy?; and(iii) How the scope of work of such function should be defined to ensure both legal compliance and practical alignment with the enterprise’s operational activities?1. Organizational models for establishing a DPO within enterprisesWhen implementing the PDPL 2025, enterprises are required to establish a DPO responsible for personal data protection. This constitutes a core component of the DPO, enabling the enterprise to monitor, coordinate, and ensure that data flows are processed in compliance with applicable legal requirements.(i) Firstly, regarding the organizational form of the DPO: Enterprises may choose to:a. Appoint an individual or establish an internal personal data protection unit: Such individual or unit will be responsible for coordinating, supervising, and working with relevant departments to ensure that personal data is processed in compliance with applicable legal requirements; or b. Engage an external organization or individual to provide DPO services:... Read more, please click here: https://www.blawyersvn.com/36-data-protection-officers-the-gatekeepers-of-personal-data-within-enterprises/﹌﹌﹌﹌﹌﹌﹌﹌The above is not official advice from BLawyers Vietnam. If you have any questions or suggestions about the above, or if you would like to collaborate and use BLawyers Vietnam’s legal advisory services, please contact us at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. We will be delighted to hear from you.📀 By: Chau DangIf you like this Podcast episode, please consider donating to us at Paypal by the following link: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.paypal.com/paypalme/BLawyersVietnam⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠You may also follow the content of our Legal news, Legal articles and Monthly Newsletters on social media platforms by visiting:BLawyers Vietnam Website: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠blawyersvn.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BLawyers Vietnam LinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠linkedin.com/company/b-lawyers-vietnam⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BLawyers Vietnam Facebook page: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠facebook.com/BLawyersVietnam⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BLawyers Vietnam Twitter (X): ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠twitter.com/BLawyers_VN⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BLawyers Vietnam Apple Podcasts: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Podcasts.apple.com/vn/podcast/the-lawyers-talk⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BLawyers Vietnam Spotify: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Spotify.com/show/BLawyersVietnam⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BLawyers Vietnam Google Podcasts: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Podcasts.google.com/feed/BLawyersVietnam⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BLawyers Vietnam YouTube Podcasts: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.youtube.com/@blawyersvietnam3376/podcasts