Insights
Articles on laws and decrees, and on data security and AI concepts that enterprises need to grasp.
Compliance guide to Personal Data Protection Law 91/2025 and Decree 356/2025 for enterprises
A summary of the core points of Law No. 91/2025/QH15 and Decree 356/2025/ND-CP, with a list of 10 things enterprises can start reviewing right away.
Read article →
Decree 356/2025/ND-CP: new rules on data incident notification
Decree 356/2025/ND-CP replaces Decree 13/2023 — it details the Personal Data Protection Law, requires incident notification within 72 hours and sets new response deadlines.
Read article →
Decree 13/2023 on personal data protection: what enterprises need to know
A plain-language overview of Decree 13/2023 — its scope, the main obligations of enterprises and the practical steps to start a review.
Read article →
How do DLP, DRM and encryption differ?
Distinguishing three commonly confused data security concepts: DLP, DRM and encryption — and why a data-centric platform needs to combine all three.
Read article →
How does AI increase the risk of data leakage?
Why employees using AI tools in their daily work creates a new kind of data risk, and how enterprises respond without banning AI.
Read article →