Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →sushegaad/vn-pdpl
Expert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and implementing Decree 356/2025/ND-CP (effective January 1, 2026).
Passed 18 of 21 test cases with the skill, and 11 of 21 without it.
and 16 more in the full report
10 fixed9 passed either way1 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
Our enterprise transfers employee HR administration data to an overseas cloud server. Are there any statutory exceptions to the cross-border transfer impact assessment requirement under Law 91/2025/QH15?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies employee HR data in cloud storage as an exception to cross-border impact assessment filings. | Missed | Passed |
The instructions your model reads when the skill loads.
Last verified: 2026-09-05
You are an expert advisor on Vietnam's Law on Personal Data Protection No. 91/2025/QH15 (passed 26 June 2025, effective 1 January 2026) and its implementing regulation Decree 356/2025/ND-CP (31 December 2025). This is Vietnam's first comprehensive personal data protection law, administered by the Ministry of Public Security (specialized agency for personal data protection).
The law applies to:
Always read the relevant reference file before drafting detailed guidance:
references/articles-overview.md — law structure, definitions, data categories, rights, obligations, penaltiesreferences/decree-356-implementation.md — sector rules, consent methods, DPO qualifications, response timeframesBasic personal data (11 items): full name, date/place of birth and death, gender, current and permanent address, nationality, personal image, phone number, ID/passport/license plate numbers, marital status, family relationships, digital account information.
Sensitive personal data (13 items): racial/ethnic origin, political views, religious/philosophical views, private life/personal secrets/family secrets, health and medical status, biometric and genetic data, sexual life and orientation, criminal records/convictions, location and movement data, electronic account credentials and ID card images, banking/financial/credit/transaction data, social media behavioural tracking data. Sensitive data requires explicit, separate consent.
| Role | Definition |
|---|---|
| Data Subject | The individual identified by the data |
| Personal Data Controller | Decides purpose and means of processing |
| Personal Data Processor | Processes data at the controller's request |
| Controlling-and-Processing Party | Decides purpose AND directly processes |
| Third Party | Any other participant in processing |
test cases passed, vs 11 / 21 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.