{"id":12112,"date":"2025-09-30T13:53:27","date_gmt":"2025-09-30T06:53:27","guid":{"rendered":"https:\/\/cft.vn\/?p=12112"},"modified":"2025-09-30T16:29:51","modified_gmt":"2025-09-30T09:29:51","slug":"protection-of-personal-data-in-marketing-and-advertising-under-the-draft-law-on-personal-data-protection","status":"publish","type":"post","link":"https:\/\/cft.vn\/en\/protection-of-personal-data-in-marketing-and-advertising-under-the-draft-law-on-personal-data-protection\/","title":{"rendered":"Protection of personal data in marketing and advertising under the Draft Law on Personal Data Protection"},"content":{"rendered":"<p>Nowadays, personal data becoming a valuable resource in the digital age, the protection of user privacy is gaining increasing attention. To ensure safety and transparency in the collection process of personal data, the draft Personal Data Protection Law proposes strict regulations regarding the consent rights of data subjects. This right not only guarantees users\u2019 autonomy in controlling their personal information but also imposes stringent legal requirements on organizations and individuals involved in data processing.<\/p>\n<p>This article will analyze in detail the regulations concerning the consent rights of data subjects in the draft Law, helping to clarify the rights and responsibilities of the parties involved in today\u2019s digital environment.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-11918\" src=\"https:\/\/cft.vn\/wp-content\/uploads\/2025\/09\/dung-6.jpg\" alt=\"\" width=\"677\" height=\"387\" \/><\/p>\n<p>\u00a0<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_83 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of contents:<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #a32411;color:#a32411\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #a32411;color:#a32411\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/cft.vn\/en\/protection-of-personal-data-in-marketing-and-advertising-under-the-draft-law-on-personal-data-protection\/#1_The_consent_of_the_data_subject_is_mandatory\" >1. The consent of the data subject is mandatory<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/cft.vn\/en\/protection-of-personal-data-in-marketing-and-advertising-under-the-draft-law-on-personal-data-protection\/#2_The_Right_to_Withdraw_Consent_of_Data_Subjects\" >2. The Right to Withdraw Consent of Data Subjects<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"1_The_consent_of_the_data_subject_is_mandatory\"><\/span>1. The consent of the data subject is mandatory<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The draft Personal Data Protection Law emphasizes the crucial role of consent from data subjects in the process of handling personal data. This is a fundamental and mandatory principle to ensure users\u2019 rights in today\u2019s digital environment.<\/p>\n<p><strong>Consent is mandatory:<\/strong>\u00a0The law stipulates that consent from the data subject is a prerequisite for all personal data processing activities, except in specific cases provided by law.<\/p>\n<p><strong>Validity of consent:<\/strong>\u00a0Consent is only valid when the data subject voluntarily and fully understands the relevant factors, such as the type of data, purpose of processing, related organizations, and their rights.<\/p>\n<p><strong>No compulsory conditions:<\/strong>\u00a0Organizations cannot require data subjects to consent to the transfer of personal data for purposes other than those initially disclosed. Data subjects have the right to refuse such requests.<\/p>\n<p><strong>Clear affirmative action:<\/strong>\u00a0Consent must be expressed through specific actions, such as writing, speaking, selecting a consent checkbox, or responding via message, ensuring clarity and transparency.<\/p>\n<p><strong>Specific purposes:<\/strong>\u00a0When processing data for multiple purposes, organizations must list each specific purpose so that data subjects can consent to each one individually.<\/p>\n<p><strong>Easy storage and verification:<\/strong>\u00a0Consent must be able to be printed, copied, or stored in either written or electronic form to ensure transparency and easy verification.<\/p>\n<p><strong>No automatic consent:\u00a0<\/strong>Silence or without response from the data subject shall not be considered as consent.<\/p>\n<p><strong>Partial or conditional consent:<\/strong>\u00a0Data subjects have the right to provide partial consent or consent under certain conditions when providing personal data.<\/p>\n<p><strong>Sensitive data:<\/strong>\u00a0When processing sensitive data, organizations must clearly inform data subjects so that they can decide whether to consent.<\/p>\n<p><strong>Validity of consent:<\/strong>\u00a0Consent remains valid until the data subject changes their mind or until requested by an authorized governmental authority.<\/p>\n<p><strong>Responsibility of proof:<\/strong>\u00a0In the case of a dispute, the responsibility to prove consent lies with the personal data controller.<\/p>\n<p><strong>Right to authorize:<\/strong>\u00a0Data subjects can authorize an organization or individual representative to carry out procedures related to personal data processing, provided that they have been informed and have consented in advance.<\/p>\n<p>Thus, the draft Personal Data Protection Law provides a comprehensive legal framework to protect users\u2019 rights, ensuring that the consent of data subjects is always a core and mandatory element in all activities related to personal data. This is something enterprises need to pay attention to in order to ensure legality and transparency in handling the data of employees, customers, and users\u2026<\/p>\n<h2><span class=\"ez-toc-section\" id=\"2_The_Right_to_Withdraw_Consent_of_Data_Subjects\"><\/span><span id=\"2_The_Right_to_Withdraw_Consent_of_Data_Subjects\" class=\"ez-toc-section\"><\/span>2. The Right to Withdraw Consent of Data Subjects<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>In the draft Personal Data Protection Law, Article 12 outlines specific provisions regarding the right of data subjects to withdraw their consent. This protects privacy and ensures transparency in the processing of personal data. Here are the key points regarding the withdrawal of consent:<\/p>\n<p><strong>Legality not affected:<\/strong>\u00a0The withdrawal of consent does not affect the legality of data processing activities that were conducted based on prior consent. This ensures that data already processed will not be deemed unlawful.<\/p>\n<p><strong>Transparent format:<\/strong>\u00a0Requests to withdraw consent must be made in a format that can be printed, copied in writing, including electronic formats or verifiable methods. This creates transparency and provides related parties with clear evidence when necessary.<\/p>\n<p><strong>Notification of consequences:<\/strong>\u00a0Upon receiving a request to withdraw consent, the personal data controller and relevant parties are responsible for informing the data subject about the potential consequences and damages that may arise from withdrawing consent. This helps data subjects to carefully consider their decision.<\/p>\n<p><strong>Stop Data Processing:<\/strong>\u00a0After completing the consent withdrawal process, all relevant parties, including the Data Controller, Data Processor, and third parties, are responsible for ceasing the processing of personal data. They must also request that other organizations or individuals stop processing any previously collected data.<\/p>\n<p>The provisions regarding the withdrawal of consent in the draft Personal Data Protection Law emphasize the rights of data subjects in managing their personal information. This not only ensures the legality for data processing parties but also provides users with flexibility in protecting their privacy.<\/p>\n<p>We can see that the draft Personal Data Protection Law lays a crucial foundation for safeguarding individual privacy in the context of rapidly advancing digital technology. The regulations on data subject consent affirm the right to control personal information and create transparent and strict legal mechanisms for organizations and individuals involved in data processing. The clarity and specificity of these regulations will help build user trust while promoting sustainable development in the digital environment. Understanding and adhering to these regulations is the responsibility of all parties to ensure safety and transparency in the use and management of personal data.<\/p>\n<p><strong><em>Time of writing:<\/em><\/strong>\u00a015\/10<em>\/2024<\/em><\/p>\n<p><em>The article contains general information which is of reference value, in case you want to receive legal opinions on issues you need clarification on, please get in touch with our Experts at <a href=\"https:\/\/mail.google.com\/mail\" target=\"_blank\" rel=\"noopener\"><strong>info@cft.vn<\/strong><\/a><\/em><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-11508\" src=\"https:\/\/cft.vn\/wp-content\/uploads\/2025\/09\/CHUONG-TRINH-THANG.png\" alt=\"\" width=\"1080\" height=\"600\" \/><\/p>\n<div class=\"content-post-nd\">\n<div style=\"text-align: center;\">\u00a0<\/div>\n<\/div>\n<div class=\"content-post-nd\">\n<p><strong>Why choose CFT\u2019s service?<\/strong><\/p>\n<ul class=\"li-content\">\n<li>We provide effective and comprehensive legal solutions that help you save money and maintain compliance in your business;<\/li>\n<li>We continue to monitor your legal matters even after the service is completed and update you when there are any changes in the Vietnamese legal system;<\/li>\n<li>Our system of forms and processes related to labor and personnel is continuously built and updated and will be provided as soon as the customer requests it;<\/li>\n<li>We have a thorough understanding of Vietnam&#8217;s legal regulations, and grasp the psychology of employees, employers, and working methods at competent authorities;<\/li>\n<li>CFT&#8217;s team of lawyers and experts has many years of experience in the field of labor and enterprises, as well as human resources and financial advisory.<\/li>\n<li>Strict information security procedures throughout the service performance and even after the service is completed.<\/li>\n<\/ul>\n<\/div>\n<p><strong style=\"color: #a32411;\">You can refer for more information:<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/cdlaf.vn\/en\/the-processes-and-procedures-for-selecting-investors-in-land-use-projects-according-to-the-latest-decree-2024\/\" target=\"_blank\" rel=\"noopener\">The processes and procedures for selecting investors in land-use projects according to the latest decree 2024<\/a><\/li>\n<li><a href=\"https:\/\/cft.vn\/en\/obligations-of-parties-involved-in-personal-data-processing-under-decree-13-2023-nd-cp\/\">Obligations of parties involved in personal data processing under Decree 13\/2023\/ND-CP<\/a><\/li>\n<li><a href=\"https:\/\/cft.vn\/en\/which-information-of-employees-is-understood-as-personal-data\/\">Which information of employees is understood as personal data?<\/a><\/li>\n<li><a href=\"https:\/\/cft.vn\/en\/latest-updates-2024-on-conditions-for-foreign-investors-doing-tourism-services-in-vietnam\/\">updates 2024 on conditions for Foreign investors doing tourism services in Vietnam<\/a><\/li>\n<li><a href=\"https:\/\/cft.vn\/en\/understanding-about-the-legality-of-e-commerce-trading-floor-in-vietnam\/\">Understanding about the legality of e-commerce trading floor in Vietnam<\/a><\/li>\n<li><a href=\"https:\/\/cft.vn\/en\/general-legal-framework-on-software-copyright-in-vietnam\/\">General legal framework on software copyright in Vietnam<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Nowadays, personal data becoming a valuable resource in the digital age, the protection of user privacy is gaining increasing attention. To ensure safety and transparency in the collection process of personal data, the draft Personal Data Protection Law proposes strict regulations regarding the consent rights of data subjects. This right not only guarantees users\u2019 autonomy&#8230;<\/p>\n","protected":false},"author":2,"featured_media":11918,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[64],"tags":[],"class_list":["post-12112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"acf":[],"_links":{"self":[{"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/posts\/12112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/comments?post=12112"}],"version-history":[{"count":3,"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/posts\/12112\/revisions"}],"predecessor-version":[{"id":12120,"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/posts\/12112\/revisions\/12120"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/media\/11918"}],"wp:attachment":[{"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/media?parent=12112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/categories?post=12112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cft.vn\/en\/wp-json\/wp\/v2\/tags?post=12112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}