The shift of social, commercial, and administrative life onto digital platforms has turned personal data into an economic asset and, at the same time, into a primary object of risk. This article examines the right to personal data protection in the digital era, analysing the roles of data subjects, data controllers and processors, and platform operators, and comparing Vietnam’s framework with those of the European Union, the United States, and Singapore. It shows that, although Vietnam’s recent legislative developments, notably the Law on Personal Data Protection (Law No. 91/2025/QH15) and the Law on Data (Law No. 60/2024/QH15), have raised the protection of personal data to the statutory level, these instruments still operate alongside the Law on Cybersecurity, the Civil Code, and consumer-protection rules without a fully integrated mechanism. As a consequence, the standards of consent, the allocation of liability among the actors in the data chain, and the accessibility of remedies for individuals do not yet match the scale of potential digital harm. To address this, the article proposes five solutions that would connect these instruments into a coherent protection framework. These measures aim to make the key actors in the digital market accountable for how they collect, use, transfer, and secure personal data. Ultimately, closing these gaps would better safeguard individuals online while sustaining the trust on which the digital economy depends.