Beyond delivering specialized legal counsel in construction, investment, and finance, CNC Counsel continues to broaden its professional capacity as a trusted legal partner in Personal Data Protection compliance—a field increasingly pivotal to global business operations.

In this recent engagement, CNC Counsel accompanied two clients with distinct operational profiles. The first is a leading airport service provider, handling a substantial volume of personal data from passengers and partners. This role requires stringent compliance mechanisms to meet the rigorous safety standards of major domestic and international airlines. The other client is a multinational renewable energy group, operating personal data processing systems for nearly 1,000 data subjects across multiple platforms, involving continuous cross-border data flows spanning multiple jurisdictions.

Facing stringent domestic regulations and international benchmarks, CNC Counsel delivered comprehensive and flexible advisory services. Notably, CNC Counsel played a key role in reviewing, advising on negotiations, and facilitating the execution of Data Processing Addenda (DPAs) with the client’s European airline partners—where data protection regulations under GDPR are strictly enforced. CNC Counsel’s team successfully harmonized conflicting legal requirements across different jurisdictions, ensuring both meticulous legal compliance and commercial efficiency for the client.

Simultaneously, CNC Counsel implemented two additional service streams, including advice on impact assessment procedures and the review of systems, templates, and internal processes to assess current compliance levels.

Accordingly, CNC Counsel advised on the preparation of Data Processing Impact Assessment Reports and Cross-Border Data Transfer Impact Assessment Reports, closely aligned with the practical expectations of competent authorities.

With respect to reviewing the clients’ existing systems, templates, and processes, CNC Counsel provided comprehensive assessments of current compliance levels and proposed optimized solutions to strengthen personal data governance frameworks, thereby preventing and mitigating legal risks arising from non-compliance with Vietnam’s prevailing personal data protection regulations.

These services have also garnered significant interest from both existing clients and the broader business community in Vietnam, particularly as Decree 13/2023/ND-CP is superseded by more stringent requirements under Decree 356/2025/ND-CP and the new Law on Personal Data Protection.

The Data Privacy Legal Team

The project was led by CNC Counsel’s experienced legal team, including Partner Nguyen Van Thinh, Partner Tran Pham Hoang Tung, and Associate Tran Anh Thy. With strategic mindset and deep expertise in corporate law, technology, and data protection, the team played a decisive role in shaping compliance roadmaps, managing risks, and ensuring consistency across the project’s legal framework.

This engagement is more than just legal advisory projects; it stands as a clear testament to CNC Counsel’s adaptability and depth of expertise in an era of increasingly complex and cross-border personal data regulation. The continued trust from clients further reinforces CNC Counsel’s position as a strategic legal partner, committed to delivering comprehensive compliance solutions that bridge domestic requirements with international standards.

📩 Contact us today to explore optimal legal solutions for your projects!

————————————–
CNC Counsel – CNC Vietnam Law Firm LLC

2A1 Nguyen Thi Minh Khai, Sai Gon Ward,

Ho Chi Minh City, Vietnam

T: (+84-28) 6276 9900 | H/L: (+84) 916 545 618