🔷 SERIES: 30 PERSONAL DATA PROTECTION COMPLIANCE SCENARIOS IN EVERYDAY BUSINESS OPERATIONS - #19: PUBLISHING FEEDBACK, CASE STUDIES, CUSTOMER LISTS: IS ANY PERSONAL DATA BEING EXPOSED?

loanlelawlinkvn
34 minutes ago
2 min read

Case studies, testimonials, and customer feedback are highly valuable marketing assets. However, in preparing such content, businesses often focus on messaging and commercial impact, without giving sufficient attention to a fundamental question: does the content intended for publication contain personal data, and if so, which elements truly need to be made public?

The risk is not limited to publishing names, phone numbers, or email addresses. In many cases, combining job titles, company names, images, locations, personal quotes, or transaction contexts can already create a reasonably identifiable profile of an individual. What appears to be “just marketing content” may, in fact, become a form of data disclosure that requires more careful review.

A practical tip for content teams:

Before publishing testimonials, case studies, or customer lists, businesses should conduct a publication content review from a personal data protection perspective.

Mini-checklist:

• Review all identifying elements appearing in the content;

• Check images, captions, quotes, and accompanying metadata;

• Assess whether the level of identifiability can be reduced while preserving content value;

• Limit the reuse of feedback content sourced from customer service channels without proper review;

• Retain an internal record of the review before publication.

In corporate communications, “data already available” does not mean “ready for public disclosure.”

Legal reference:

Law on Personal Data Protection No. 91/2025/QH15 and its implementing framework, including provisions on transparency, purpose limitation, data sharing, and organizational responsibility for protecting personal data.

CTA:

A practical checklist is available at the link below:

https://drive.google.com/file/d/1Wa4TaakKkT0AE_5aw6krCfAzre8zSbxS/view?usp=sharing

💌 Next article: Collecting ID cards for customer verification: When is it justified – and when should you stop?

-------------------------------

Article: Prepared by LLVN.

Image: LLVN

-------------------------------

𝐂𝐨𝐧𝐭𝐚𝐜𝐭 𝐮𝐬

Website: www.lawlink.com

Instagram: lawlink.vietnam

Facebook: Lawlink Vietnam