Data subjects have the right to self-protect

Rights of data subjects in personal data protection activities

Accordingly, the rights of data subjects in personal data protection activities include:

First, the right to be informed:
The data subject has the right to be informed about their personal data processing activities, except as otherwise provided by law.

Second, the right to consent:
The data subject has the right to consent or not consent to the processing of their personal data, except as provided in Article 17 of Decree 13/2023/NĐ-CP.

Third, the right to access:
The data subject has the right to access, edit, or request the correction of their personal data, except as otherwise provided by law.

Fourth, the right to withdraw consent:
The data subject has the right to withdraw their consent, except as otherwise provided by law.

Fifth, the right to delete data:
The data subject has the right to delete or request the deletion of their personal data, except as otherwise provided by law.

Sixth, the right to limit data processing:
The data subject has the right to request the limitation of the processing of their personal data, except as otherwise provided by law.
Limitation of data processing shall be carried out within 72 hours after the data subject's request, for all personal data that the data subject requests to be limited, except as otherwise provided by law.
Seventh, the right to data provision:
The data subject has the right to request the Personal Data Controller and Processor to provide themselves with their personal data, except as otherwise provided by law.

Eighth, the right to object to data processing:
The data subject has the right to object to the Personal Data Controller and Processor processing their personal data to prevent or restrict the disclosure or use of personal data for advertising or marketing purposes, except as otherwise provided by law.
The Personal Data Controller and Processor shall comply with the data subject's request within 72 hours of receipt, except as otherwise provided by law.
Ninth, the right to complain, denounce, or file a lawsuit:
The data subject has the right to complain, denounce, or file a lawsuit according to the provisions of the law.

Next, the right to request compensation for damages:
The data subject has the right to request compensation for damages in accordance with the provisions of the law when there is a violation of their personal data protection regulations, except as otherwise agreed by the parties or provided by law.

Finally, the right to self-defense:
 

Data subjects have the right to self-protect under the provisions of the Civil Code, other relevant laws, and Decree 13/2023/NĐ-CP, or request competent agencies and organizations to implement civil rights protection measures as prescribed in Article 11 of the Civil Code 2015.

Decree 13/2023/NĐ-CP takes effect from July 01, 2023.