Abstract

This article examines the theoretical foundations of the shared responsibility model for personal data protection in cloud computing environments. Drawing on a comparative analysis of relevant legislation and regulatory approaches in the European Union, the United States, and Singapore, it assesses Vietnam’s existing legal framework and identifies regulatory gaps in the allocation of responsibilities among cloud service stakeholders. Based on these findings, the article proposes recommendations for improving Vietnamese law in a manner that reflects the distinctive technical and operational characteristics of cloud computing.

Keywords: Cloud computing, personal data protection, shared responsibility.