DPO Radio
AesirX ComplianceOne | NQ22/2026 PDPL Procedures
Government Resolution NQ22/2026 Procedures
A procedural overlay for selected Ministry of Public Security administrative work
Manage temporary personal data protection procedure changes, official channel evidence, and expiry review without treating NQ22 as a sanctions instrument.
Government Resolution NQ22/2026: Scope and Current Status
Government Resolution NQ22/2026 introduces temporary administrative-simplification measures for selected Ministry of Public Security procedures. It has been effective since 29 April 2026 and is scheduled to expire on 1 March 2027.
The overlay affects personal data protection impact-assessment and related administrative workflows under Decree 356 and Decision 778. It does not change substantive personal data protection obligations and does not establish sanctions or fine ranges.
A review is scheduled for 1 February 2027 so organizations can assess replacement instruments, extensions, or a return to the underlying procedures before expiry.
How NQ22 Relates to the Vietnam PDPL
The PDPL remains the parent law, Decree 356 remains the implementing decree, and Decision 778 remains the administrative-procedure layer. NQ22 temporarily adjusts selected procedural handling across that stack.
Procedural Scope and Official Channels
| Area | NQ22 Treatment | Evidence to Maintain |
|---|---|---|
| Processing impact assessment | Temporary procedural handling for relevant dossier workflows | Dossier, approval, channel, receipt, and response records |
| Cross-border transfer assessment | Temporary procedural handling for relevant transfer dossiers | Assessment, supporting documents, approval, and submission proof |
| Dossier updates | Temporary handling for changes to previously submitted assessments | Change record, updated dossier, approval, and outcome |
| Service-provider certificate work | Selected reissue or change procedures where applicable | Application, supporting records, and authority outcome |
| Expiry management | Review before 1 March 2027 | Assigned review, legal assessment, and transition decision |
How ComplianceOne Supports NQ22 Procedures
ComplianceOne marks NQ22 as temporary and keeps its effective period and review date visible. Teams can apply the temporary procedure to relevant cases without overwriting the underlying Decree 356 or Decision 778 record.
Official channel, receipt, response, and follow-up evidence can be recorded with responsible owners and approvals. The practical email route is separated from official channel selection and carries its own legal-review requirement.
Expiry review can be assigned in advance so open cases and future filings are reassessed before the overlay ends.
Related Modules
Compliance Forms
Connects forms and supporting records to the selected procedure.
Explore Compliance FormsAudit Trail
Preserves approval, channel, sending, response, and follow-up history.
Explore Audit TrailProcedural Readiness Checklist
See NQ22 Procedure Management in Action
See how ComplianceOne manages temporary procedures, channel evidence, human approval, and expiry review.
Ronni K. Gothard Christiansen - Technical Privacy Engineer & CEO
Technical Compliance Expert, 25+ Years Open Source Advocate, X-BoD Open Source Matters Inc.
Frequently Asked Questions
No. NQ22 is a temporary procedural overlay. It does not establish personal data protection or cybersecurity fine ranges.
The overlay has been effective since 29 April 2026 and is scheduled to expire on 1 March 2027. A review should occur before expiry.
The official channels are the National Public Service Portal, direct submission to the Ministry of Public Security, and postal submission to the Ministry of Public Security.
During the temporary procedures introduced under NQ22, the Ministry of Public Security has issued instructions for applicable procedures that are handled by email. ComplianceOne supports these workflows by helping organizations prepare, manage, and retain the required evidence package together with the associated approval and submission records.
Forseti AI can automate assembly of the evidence package in accordance with the applicable procedure. Human oversight remains responsible for reviewing and approving the package before submission.
Next Steps
Start a Compliance Pilot
Test temporary procedure handling, evidence packs, responses, and expiry review.
Discuss Your Compliance Needs
Review official channels, unofficial guidance, and your NQ22 transition plan.
The evolution of Aesir is Aesir + 
(the Norse symbol for Necessity)"Needed in order to achieve a particular result"
♥Join the AesirX Privacy Newsletter. Stay Informed. Stay Compliant.
