Personal data protection in the digital era: HPT’s perspective on legal and technology at EVNHCMC IT Day 2025

On December 12, 2025, at the Information Technology Conference – IT Day 2025, themed “Artificial intelligence in building a secure and modern digital infrastructure” and organized by Ho Chi Minh City Power Corporation (EVNHCMC), HPT’s presentation titled “Personal data protection in the digital era”. The session distinguished itself through its strong professional depth and practical perspective, addressing the real-world challenges faced by organizations managing large-scale digital infrastructures.

Mr. Dinh Ha Duy Linh — Vice Chairman of the Board and CEO of HPT, received a commemorative plaque from EVNHCMC.


The conference was held amid growing dual pressures facing the power sector in particular and critical infrastructure enterprises more broadly: accelerating digital transformation while simultaneously complying with increasingly stringent requirements for information security, data protection, and legal compliance.

IT Day 2025 brought together senior leaders and representatives from Vietnam Electricity (EVN), the Information and Communications Technology Company of Vietnam Electricity (EVNICT), the leadership of EVNHCMC, along with functional departments, affiliated units, and technology partners. Discussions focused on key technology trends shaping the power industry, with particular emphasis on the role of artificial intelligence in digital infrastructure governance, operational monitoring, system security, and data protection in an increasingly complex digital environment.


Conference overview. Photo: EVNHCMC

At the conference, Mr. Le Quoc Bao, Deputy General Director of the HSE Center, focused on analyzing key developments in the legal framework for personal data protection, with particular emphasis on the transition roadmap from Decree No. 13/2023/ND-CP to the Law on Personal Data Protection No. 91/2025/QH15.

Accordingly, 2025 is regarded as a pivotal year, as compliance requirements extend beyond the completion of documentation or administrative procedures to demand substantive changes in data governance practices and technology system design. For organizations in the power sector, where operational data and personal data are closely intertwined with the delivery of essential services, these requirements are especially critical.


Mr. Le Quoc Bao, Deputy General Director of the HSE Center, presenting at the conference.

A key highlight of the presentation was HPT’s holistic approach to compliance, integrating legal and technological dimensions in parallel. From a legal perspective, the presentation clarified the responsibilities of data controllers and data processors, requirements for conducting Data Protection Impact Assessments (DPIA), and the role of data protection personnel under the new regulatory framework. These requirements were structured into clear roadmaps and practical checklists, enabling organizations to easily reference and implement them in real-world operations.

From a technology standpoint, HPT analyzed a multi-layered security architecture, focusing on critical layers such as databases, applications, users, and privileged accounts. The presentation also identified prominent risk scenarios emerging alongside the rapid adoption of artificial intelligence, including ransomware attacks targeting databases, data leakage via APIs, supply chain attacks, and increasingly sophisticated impersonation and deepfake threats.

In addition, HPT provided an in-depth analysis of the information security risk landscape in 2025, drawing on data and trends related to data breaches in Vietnam and globally. These insights underscored that data security is no longer a standalone technical challenge, but a strategic risk management issue, particularly for smart urban infrastructure systems.

With a well-prepared presentation, clear arguments, and a strong focus on practical realities, HPT delivered valuable expert insights at IT Day 2025. The session was highly appreciated by attendees for its applicability and its ability to provide concrete implementation directions for organizations in the power sector, especially in bridging new legal requirements with appropriate technology solutions. This approach enables organizations to better envision a structured, secure, and sustainable digital foundation amid digital transformation and the era of artificial intelligence.