Vietnam is among the top 10 countries with the highest volume of cross-border data transfer, yet its legal system on cross-border personal data protection has many flaws. A suitable legal approach to effectively managing that data flow is therefore required.