HM&P Law Firm is pleased to inform our clients, partners, employees and stakeholders about the appointment of the Firm's Data Protection Officer (DPO).
Accordingly, HM&P officially appoints Lawyer Nguyen Ngoc Tra My to hold the role of Personal Data Protection Officer (DPO) at HM&P, effective January 15, 2026.
This appointment is made to meet the compliance requirements of the Law on Personal Data Protection and the Government's Decree No. 356/2025/ND-CP which has been issued and officially takes effect from January 1, 2026. This appointment demonstrates HM&P's consistent orientation in ensuring the security of personal data of customers, partners, and employees is a top priority and puts compliance at the heart of HM&P's operations and legal services provision.
Location and scope of functions of DPO:
According to Vietnamese law, the DPO is determined to be the focal point responsible for organizing, supervising and implementing personal data protection activities in the enterprise. Specifically, as follows:
1. Role of DPO:
At HM&P, DPO acts as a compliance advisory and monitoring role for the entire lifecycle of personal data processing, including:
- Advising on the development of policies, processes, regulations, and forms to comply with legal provisions on personal data protection;
- Participate in the implementation of the rights of personal data subjects;
- Participate in periodic activities to assess the current status of compliance with the law on personal data protection and propose measures to improve the effectiveness of legal compliance, risk prevention and control;
- Prepare dossiers of impact assessment of cross-border personal data transfers, dossiers of impact assessment of personal data processing, receive and report violations of personal data protection and comply with other requirements of competent agencies as prescribed;
- Participate in training programs and courses on personal data protection;
- Participate in the implementation of technical measures to protect personal data, standards and regulations on personal data protection, and emergency response plans for personal data protection incidents.
2. Principles for performance of tasks of DPO:
In the course of performing their tasks, the DPO must follow the following principles:
- To be guaranteed the independence necessary to perform the function in accordance with the law;
- Have the right to access information, data and personal data processing activities to the extent necessary to serve compliance advice and monitoring;
- Perform tasks on the principle of information confidentiality, in accordance with the provisions of the law on personal data protection and relevant internal regulations of HM&P.
Duties of the DPO:
Within the scope of their assigned functions, the DPO at HM&P performs the following key duties:
- Advising and advising the Company on compliance obligations and risk management mechanisms related to the protection of personal data;
- Oversee compliance with personal data protection laws and HM&P's internal policies and procedures;
- Coordinate in handling incidents or risky situations related to personal data when they arise;
- Acting as the focal point for receiving and coordinating the implementation of legal obligations and requests of data subjects and working with competent state agencies in the field of personal data protection when necessary.
Data subjects may contact HM&P's DPO for any matters relating to the processing of personal data as well as the exercise of their rights under the law.
HM&P's Commitments:
HM&P's formal appointment of the DPO once again demonstrates the Company's clear commitment to respecting and protecting the personal data of customers, partners, employees and related data subjects. This is part of HM&P's long-term strategy to raise internal governance standards, increase transparency and strengthen customer trust amid increasingly tightening personal data protection requirements.
In addition to strengthening regulatory measures, HM&P is working with its engineering team and computer science engineers specializing in AI and Data to strengthen technical measures to ensure the highest possible level of data security.
HM&P is committed to controlling and ensuring data security in accordance with the strictest standards of a legal service provider in Vietnam.
DPO and contact information:
Ms. Nguyen Ngoc Tra My is currently a Partner at HM&P, with a deep understanding of data, personal data and privacy law. During her practice, Lawyer My has directly participated in consulting, developing and implementing personal data protection policy frameworks and procedures for many domestic and foreign businesses in many different industries and activities. Ms. My has participated in training, has been granted an expert certificate in personal data protection in Vietnam, and is completing training courses to be granted prestigious international certificates on personal data protection.
If you have any questions or questions regarding the protection of personal data at HM&P, please contact our DPO at the information below:
- Name: Lawyer Nguyen Ngoc Tra My
- Address: 7th Floor, ITAXA Building, 126 Nguyen Thi Minh Khai, Xuan Hoa Ward, Ho Chi Minh City
- Email: my.nguyen@hmplaw.vn
- Phone: (+84) 28 7308 0839
.png)
+84 28 7308 0839.png)
hmplaw.vn
