Law on Personal Data Protection, biometric and location data protection

Law No. 91/2025/QH15, Article 31

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force 9 months, effective 1 January 2026.

A biometric privacy rule binding public and private bodies.

As of 29 August 2026.

What it requires

An app that collects or processes biometric data, meaning physical attributes and unique, stable biological characteristics used to identify a person, from an individual in Vietnam must apply physical security measures, limit access, and maintain a monitoring system to detect infringement, and is liable for damage its processing causes.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 31 defines biometric data as data on physical attributes and unique and stable biological characteristics of a person used to identify that person, and requires an organization, agency, or individual collecting or processing biometric data to apply physical security measures for storage and transmission devices, limit access, maintain a monitoring system to detect infringement, and comply with relevant laws and international standards; a processor causing damage through biometric-data processing is liable.

Article 31 names no facial, voice, or fingerprint example, resting entirely on the general physical-attribute language; whether the definition reaches an identifier derived from a photo, video, or audio recording is unresolved. This provision functions as heightened, category-wide protection rather than a named consent-at-capture rule distinct from the Law's general Article 8 consent duty.

When LexLint raises it

processes_biometrics
processes_voice
trains_models
crawls_web

Read the law

Government Portal (chinhphu.vn) citation
substantive text read via a private secondary translation (LuatVietnam)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app