Abstract

Data subject consent is an important legal basis for lawful personal data processing and a safeguard of individuals’ autonomy over their personal data. The 2025 Law on Personal Data Protection sets out the requirements for valid consent. However, some criteria remain broadly defined, particularly those concerning the assessment of voluntariness, the information that must be provided to data subjects, and the mechanisms for ensuring meaningful consent. This article analyses the current legal framework, identifies its limitations, and proposes improvements to enhance the quality of consent in personal data processing in Vietnam.

Keywords: Consent, personal data, personal data protection, voluntariness.