Vietnamese Personal Data Protection Decree (PDPD Decree 13/2023/ND-CP), DPIA Form 04, cross-border data transfer, and 72-hour breach response.