Protecting biometric data in the digital age under the laws of several countries and lessons for Vietnam

Abstract

In the digital era, biometric data - such as fingerprints, facial features, iris patterns, and voice - is increasingly utilized in finance, healthcare, e-commerce, and public administration. In Vietnam, although legal instruments including the 2018 Law on Cybersecurity, the 2023 Decree on Personal Data Protection, and most recently the Law on Personal Data Protection, enacted by the National Assembly on June 26, 2025 and effective from January 1, 2026, have established an initial framework for personal data protection in general, they are not enough to protect biometric data, which is a special type of personal data. This paper examines the legal frameworks governing biometric data protection in selected countries, thereby proposing recommendations for Vietnam.