Vietnam’s Personal Data Protection Law (PDPL), enacted in June 2025 and effective from January 1, 2026, establishes a comprehensive national framework for personal data protection, replacing the 2023 Decree No. 13/2023/NĐ-CP. Applicable to both domestic and foreign entities processing Vietnamese citizens’ or residents’ data, the PDPL introduces strict penalties (up to 10 times illegal proceeds for data trading or 5% of annual revenue for cross-border violations), a narrow “legitimate rights and interests” processing basis, and exemptions for micro-enterprises. It mandates explicit consent, data processing and transfer impact assessments (DPIA and TIA), and robust data subject rights, including access, correction, and deletion. Enterprises must implement consent mechanisms, data security measures, and compliance with data localization under the Cybersecurity Law, with specific rules for sensitive data like children’s or health information, and a 72-hour breach reporting requirement.
On September 6, the EU published a FAQ on the Data Act, explaining its relationship with the GDPR and addressing issues related to IoT data access and business-to-business data sharing.
The European Commission announced that TikTok has committed to permanently withdrawing its TikTok Lite rewards program from the EU market after concerns that the program violated the EU's Digital Services Act (DSA). The investigation highlighted TikTok's failure to conduct the required risk assessments before launching new features, marking the first case concluded by the European Commission under the DSA.
On July 30, the US passed two significant laws, the Kids Online Safety Act (KOSA) and Children and Teens' Online Privacy Protection Act (COPPA 2.0), marking a major shift in regulatory strategies for protecting children's online privacy.
This article provides a complete guide to the new requirements for the App Store in relation to privacy manifest and signature.
The European Union has launched an official investigation into TikTok under the Digital Services Act (DSA) to assess its compliance with child protection measures and online content regulations.
India's Consumer Protection Authority introduces "Prohibition and Regulation of Dark Patterns 2023 Guidelines" to combat deceptive e-commerce practices.
