Ensuring the Protection of Personal Data in the Use of Cloud Computing Services: Legal Obligations and Responsibilities of Relevant Stakeholders

Abstract

In line with the global digital transformation trend, economic organisations and State management agencies are increasingly moving data to cloud platforms because of significant advantages such as lower costs, faster deployment and execution, and substantial improvements in employee productivity. In the context of data being stored across multiple countries, the involvement of numerous intermediaries, and the growing risk of cyberattacks, clearly defining the legal obligations and liabilities of actors throughout the cloud computing service supply chain has become an urgent requirement. Based on an assessment of the current legal framework in Vietnam, the author identifies legal gaps concerning the allocation of liability, cross-border data flow governance, and mechanisms for compensation for damage. On that basis, the article proposes solutions for improving the legal framework so as to balance the objectives of digital economic development and the protection of fundamental human rights.