BẢO VỆ DỮ LIỆU CÁ NHÂN NHẠY CẢM THEO QUY ĐỊNH CHUNG VỀ BẢO VỆ DỮ LIỆU CỦA LIÊN MINH CHÂU ÂU (GDPR) VÀ GIÁ TRỊ THAM KHẢO CHO VIỆT NAM

Abstract

The article analyzes the provisions on sensitive personal data under theEuropean Union’s General Data Protection Regulation (GDPR) and compares themwith the provisions in Vietnam’s Decree No. 13/2023/ND-CP. It argues that althoughDecree 13 has initially acknowledged the necessity of special protection for sensitivepersonal data, the current provisions are still formalistic and ineffective, lacking a cleardistinction between the collection and processing of sensitive personal data and otherpersonal data. Based on the analysis of GDPR provisions, the article offers severalrecommendations for improving the legal regulations on the protection of sensitivepersonal data, especially in the context of Vietnam's efforts to develop a Personal DataProtection Law.