Passenger Data Explained

Vietnam: passenger data record

Last checked: 22 October 2026 · Country records

Vietnam's first general data protection rule was Decree 13/2023/ND-CP, issued on 17 April 2023 and in force from 1 July 2023 1. The National Assembly passed the Law on Personal Data Protection on 26 June 2025, in force from 1 January 2026 2. Decree 356/2025/ND-CP guides the Law and supersedes Decree 13 3. Decree 27/2011/ND-CP requires airlines to send advance passenger information before landing 4. The Immigration Department of the Ministry of Public Security runs the e-visa portal 6.
Data protection law
Law on Personal Data Protection No. 91/2025/QH15, passed 26 June 2025, in force 1 January 2026 2,3. Decree 13/2023/ND-CP applied from 1 July 2023 1
Data protection authority
Department of Cybersecurity and Hi-tech Crime Prevention, Ministry of Public Security, under Decree 13/2023 1
Agency that receives API/PNR
Airport authority of the international airport receives API under Decree 27/2011, with use by immigration, border security, customs and civil aviation bodies 4
API/PNR status
API rule in force from 15 April 2014 after Decree 75/2013 moved the start date 5. PNR data used in the Pre-arrival Information pilot of April 2026 7
Biometric collection at entry
Yes for autogate users. Autogates use fingerprint and face recognition 8
Date checked
22 October 2026 2,36

Decree 13/2023 and the 2025 Law

The Government issued Decree 13/2023/ND-CP on 17 April 2023 and it took effect on 1 July 2023 1. The Asian Development Bank's SEADS platform said the Decree names the Department of Cybersecurity and Hi-tech Crime Prevention under the Ministry of Public Security as the specialised agency 1. A party sending a Vietnamese citizen's personal data abroad must prepare an impact assessment dossier and submit it to the Department within 60 days of processing 1.

As reported by the Voice of Vietnam on 26 June 2025, the National Assembly passed the Law with 433 of 435 deputies taking part voting in favour 2. The Law took effect on 1 January 2026 2.

Decree 356/2025/ND-CP, dated 31 December 2025, guides the Law and took effect on 1 January 2026 3. It supersedes Decree 13/2023/ND-CP 3.

  • Buying or selling personal data: fine of up to ten times the illegal proceeds 2.
  • Breach of cross-border transfer rules: fine of up to 5% of the previous year's revenue 2.
  • Other violations: fine of up to VND 3 billion for organisations, with half that level for individuals 2.

Advance passenger information

Decree 27/2011/ND-CP of 9 April 2011 covers information on passengers before they enter Vietnam by air 4. Article 1 places the duty on airlines and private flight operators 4. Article 5 says data goes to the airport authority of the international airport on a 24-hour basis, at the time passengers board 4. Article 6 lets civil aviation, immigration, border security and customs bodies use it 4.

Article 14 of Decree 27 first set 1 June 2011 as the start date 4. Decree 75/2013/ND-CP of 15 July 2013, issued on the proposal of the Minister of Public Security, changed the start date to 15 April 2014 5. The translations reviewed do not mention PNR data or a retention period 4,5.

  • Flight data: route, flight number, airline, border gate, number of passengers and crew, entry and exit times 4.
  • Passenger and crew data: full name, sex, date of birth, nationality, and the type, number, place of issue and validity of travel documents 4.

Pre-arrival Information and the e-visa

As reported by the Vietnam News Agency on 12 May 2026, the Immigration Department piloted a Pre-arrival Information (PAI) platform at Tan Son Nhat airport from 15 April 7. Passengers can submit travel information within three days before arrival 7. In the first 15 days, 161,596 passengers opened the system and 119,854 completed it 7. The report said some submissions failed where flight codes did not match Passenger Name Record data 7. The report said the department planned to roll the platform out nationwide 7.

Government Resolution 127/NQ-CP, issued on 14 August 2023 and in force from 15 August 2023, extended e-visas to citizens of all countries and territories 6. The maximum stay rose from 30 days to 90 days, with single or multiple entry 6. The Embassy of Vietnam in Japan says the official portals are evisa.gov.vn and thithucdientu.gov.vn, administered by the Immigration Department of the Ministry of Public Security 6.

Autogates

The Government news portal reported on 21 August 2023 that autogates went into use from 1 August 2023 at Noi Bai, Tan Son Nhat, Da Nang, Cam Ranh and Phu Quoc airports 8. On entry the gates were open to Vietnamese citizens only 8. Passengers scan their passport and boarding pass and then go through face recognition and fingerprint scanning 8.

As reported by Marisa Chimprabha and Nguyen Thi Dieu Linh of Thai PBS World on 3 August 2023, foreigners with residence cards issued by Vietnam can register to use the gates on departure 9. Neither source names a gate supplier 8,9.

Regulator action on passenger information

As reported by Nguyen Duy of TheLEADER on 8 October 2017, the Civil Aviation Administration of Vietnam said taxi firms had obtained passengers' journey details and phone numbers and used them for marketing 10. The regulator said people who illegally exchange and use passenger information would be fined 10. It asked airlines to review how they store and manage passenger personal information and planned to inspect all airlines that month 10. The report names no airline 10.

Chronology

DateEvent
9 April 2011 4Decree 27/2011/ND-CP on advance passenger information issued 4
15 April 2014 5Decree 27 takes effect under Decree 75/2013 5
8 October 2017 10Civil aviation regulator acts on passenger data use by taxi firms 10
1 July 2023 1Decree 13/2023/ND-CP takes effect 1
1 August 2023 8Autogates start at five airports 8
15 August 2023 6E-visa opened to all countries, stay up to 90 days 6
26 June 2025 2National Assembly passes the Law on Personal Data Protection 2
1 January 2026 2,3Law and Decree 356/2025/ND-CP take effect 2,3
15 April 2026 7Pre-arrival Information pilot starts at Tan Son Nhat 7

Common questions

Is Decree 13/2023 still in force?

No. Decree 356/2025/ND-CP superseded it from 1 January 2026 3.

Who receives advance passenger data in Vietnam?

Decree 27/2011 sends it to the international airport authority, with use by immigration, border security and customs 4.

Where do I apply for a Vietnam e-visa?

On evisa.gov.vn or thithucdientu.gov.vn, run by the Immigration Department 6.

Can foreign tourists use Vietnam's autogates?

Reports from August 2023 said entry gates were for Vietnamese citizens, and residence card holders could use them on departure 8,9.

Rules and fees change. Check the official site linked above before you apply or pay. Spotted an error? Email [email protected] with the official link.

Sources

  1. Asian Development Bank SEADS: Viet Nam's personal data protection decree, examining benefits and key challenges (12 September 2023)
  2. Voice of Vietnam: National Assembly passes Law on Personal Data Protection (26 June 2025)
  3. LuatVietnam: The latest Law on Personal Data Protection and the guiding documents (23 January 2026)
  4. LuatVietnam, unofficial translation: Decree 27/2011/ND-CP on passenger information before entering Vietnam by air (9 April 2011)
  5. LuatVietnam, unofficial translation: Decree 75/2013/ND-CP amending Decree 27/2011/ND-CP (15 July 2013)
  6. Embassy of Vietnam in Japan: e-visa for citizens of all countries under Resolution 127/NQ-CP (accessed 22 October 2026)
  7. Vietnam News Agency via Bao Tay Ninh: Vietnam to roll out pre-arrival information system nationwide (12 May 2026)
  8. Vietnam Government News: Five airports deploy automatic entry system (21 August 2023)
  9. Thai PBS World, Marisa Chimprabha and Nguyen Thi Dieu Linh: Vietnam expands automated passport control at major airports (3 August 2023)
  10. TheLEADER, Nguyen Duy: CAAV strictly dealing with the illegal trading of passenger information (8 October 2017)

Related