You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

March 9, 2016

Legal Update: New Regulations in the ICT Sector in Vietnam

Subscribe to Updates

The final months of 2015 saw a flurry of new legislation in Vietnam’s Information Communication and Technology (ICT) sector. Some of the new regulations have recently taken effect, while others will become effective later in 2016. Below we provide an overview of some key legislation:

  • Information security. The new Law on Information Security is Vietnam’s first comprehensive statute in this area. Previously, data-security regulations were scattered across different pieces of legislation, such as the Law on Information Technology and the Law on Telecommunications. The new law includes, among other things, provisions on ensuring safety and security of information; protecting personal information in the network environment; and preventing spam, computer viruses, and harmful software. The Law on Information Security was passed on November 19, 2015, and will take effect on July 1, 2016.
  • Broadcasting services. Decree 06/2016/ND-CP on management, provision, and use of broadcasting services, which will come into force on March 15, 2016, regulates pay TV and the co-production of radio and TV programs. Replacing the current Decision 20 and Circular 19, Decree 06 has new, clearer regulations on Internet TV and offers some licensing exemptions for foreign channels which do not receive royalty payments. In addition, under the new decree, the number of foreign channels cannot exceed 30 percent of the total number of pay TV channels in Vietnam. The key content in Circular 19 on coproduction of radio and TV programs is retained in Decree 06, including the ban on coproduction of news and politics programs.
  • Internet resources. Circular 24/2015/TT-BTTTT on management and use of Internet resources provides additional grounds for dealing with “.vn” domain name disputes. For more information about Circular 24, please refer to our previous legal update.
  • Used IT products. The list of used IT products that are prohibited from importation has been updated in Circular 31/2015/TT-BTTTT (passed on October 29, 2015, and effective from December 15, 2015). This list notably still includes refurbished IT products, but upcoming legislation (see below) is expected to include some exceptions for refurbished goods.
  • Used machinery, equipment, and production lines. Circular 23/2015/TT-BTTT on importing used machinery, equipment, and production lines was passed on November 13, 2015, and will take effect on July 1, 2016, replacing Circular 20. Circular 23 will make it significantly easier for ICT companies to import used equipment by reducing restrictions and facilitating customs clearance.
  • Quality control of telecom services. Circular 35/2015/TT-BTTTT mainly updates the list of telecommunication services subject to quality control to keep up with the latest advances in technology. This circular came into effect on February 15, 2016.
  • Safety and security of information systems in banking operations. Circular 31/2015/TT-NHNN provides comprehensive security regulations in banking operations in areas including safety and security of information systems and management of online transaction services. Importantly, the circular clearly sets out that it applies not only to the State Bank of Vietnam and credit institutions, but also to foreign bank branches and providers of intermediary payment services—a new category not covered by the previous regulations. The new circular passed on December 28, 2015, and took effect on March 1, 2016.

In addition, a number of key regulations have been proposed which are currently still in draft form, including:

  • A circular on Over-The-Top services is currently on hold at the Ministry of Information and Communications (MIC).
  • A draft circular on cross-border service provision of public information was released for a public consultation period, which ended in June 2015. The circular is under consideration and is expected to be approved by the MIC in 2016.
  • There has been a long-pending draft of a decree on IT services, but it remains on hold.
  • A circular on the list of IT services has been drafted and released for public consultation. It is under consideration for approval. 
  • Procedures for registration of information content service provision on mobile telecommunication networks may be addressed under a new circular. A draft was released for public consultation from July 6 to September 6, 2015, and is under further regulatory review.
  • The existing Circular 12/2013 on telecom licensing may be amended. Draft amendments have been publicly released, but a timeline for the amendments is not yet available.
  • Finally, there may be a future decision of the Prime Minister to allow importation of refurbished IT products, components, and accessories, as long as they meet certain stipulated conditions.

To learn more about these regulations, please contact [email protected].

 

Download Full Article
Related Professionals

Industries

Technology

Location

RELATED INSIGHTS​ 

September 30, 2026
On September 15, 2026, Vietnam’s Ministry of Finance (MOF) released for public consultation a draft circular on reporting and information disclosure in the pilot crypto asset market. The draft implements Resolution No. 05/2025/NQ-CP on the Pilot Implementation of the Crypto Asset Market in Vietnam and provides further detail on how licensed crypto asset service providers (“CASPs”) will be supervised once the market becomes operational. The draft indicates a data-intensive supervisory model, with licensed CASPs serving as the first line of market oversight. Public Disclosure Requirements The draft imposes detailed public disclosure requirements on CASPs, aimed primarily at market transparency. CASPs and crypto asset issuers must make disclosures in both Vietnamese and English, retain reported and disclosed information for at least 10 years, and keep information published on their websites accessible for at least five years. For CASPs, disclosure obligations arise both periodically and when specific events occur. A CASP must announce any crypto asset to be admitted to trading on its website at least seven days before trading begins and publish periodic financial statements. Certain extraordinary events and information requested by the MOF must generally be disclosed within 24 hours. CASPs must also provide ongoing market information. During trading hours, they must publish key trading data, including prices and volumes, daily highs and lows, average prices, the three best bid and offer levels, and transactions by foreign investors. By 9:00 a.m. each trading day, they must publish specified information on the previous day’s trading activity. Regulatory Reporting Requirements Separate from public disclosure, the draft requires CASPs to provide regulators with detailed information enabling ongoing supervision of their operations and the market. For market activity, CASPs must report decisions to admit or remove a crypto asset from trading within 24 hours, submit previous-day trading data to the State Securities Commission
Read More
September 24, 2026
Vietnam is implementing and developing a broad package of regulatory reforms that could reshape how IP, data, digital platforms, and product authenticity are regulated and enforced. Several of the key measures have been led by the Ministry of Public Security in its legislative and administrative capacity, as part of a broader government effort. The core reform package consists of four key legal instruments: proposed amendments to the Criminal Code, a proposed new Data Security Law, a draft Decree on Product Identification, Authentication and Traceability, and the newly enacted Decree No. 330/2026/ND-CP. These instruments include rules on criminal enforcement, data security, electronic identification, product identification and traceability, administrative violations, and cybersecurity sanctions. Combined, these measures will affect copyright enforcement, industrial property rights, trade secrets, AI training data, product provenance, online takedowns, valuation of counterfeit goods and electronic evidence. It is worth noting that, in addition to strengthening criminal penalties for IP crimes, Vietnam’s emerging regulatory framework increasingly treats infringement, data misuse, product authentication, and platform-enabled violations as interconnected regulatory and enforcement challenges. For rights holders and foreign investors, this could mean stronger tools against counterfeiting and online infringement, but also more compliance obligations around data, traceability, AI, platform controls and government-facing reporting. Expansion of Criminal IP Enforcement Proposed amendments to Article 225 of the Criminal Code would expand criminal copyright exposure beyond reproduction and distribution to cover large-scale commercial public performance and online communication of works, phonograms and video recordings. This is important because piracy is increasingly about streaming, unauthorized communication, and platform access models rather than physical copying. Aggravated copyright infringement could be subject to up to 10 years in prison for individuals and fines of up to VND 6 billion (about USD 228,300) for commercial legal entities. The amended Article 226 would expand criminal industrial property liability beyond
Read More
September 17, 2026
Thailand’s Office of the Consumer Protection Board (OCPB) has released for public comment a draft bill to amend the Consumer Protection Act B.E. 2522 (1979), the country’s foundational consumer protection legislation. The draft amendment aims to modernize the nearly five-decade-old framework to address the rapid growth of digital commerce, online advertising, influencer marketing, and new business models. The public consultation period is open until October 10, 2026. Expanded Definitions Covering Digital Commerce The draft significantly broadens several core definitions to capture modern commercial activities: “Consumer” is expanded to include natural persons and nonprofit juristic persons who purchase or receive services, including those solicited by businesses and end users who do not directly pay for the goods or services. “Business operator” now explicitly covers advertising business operators and hired advertising persons, such as influencers and content creators. “Advertising media” is expanded to include digital platforms, social media, and social media user accounts. “Label” now encompasses electronic labels—symbols, codes, or other electronic formats displaying product information. Influencer and Advertising Disclosure Requirements In addition to these expanded definitions, “hired advertising person for selling goods or services” is a new definition covering influencers, content creators, live streamers, affiliate marketers, and virtual online media operators who receive monetary compensation or other benefits for advertising goods or services. Hired advertising persons—including influencers and content creators—must disclose to consumers that content is advertising and reveal their relationship with the business owner. Disclosure is required when the business owner employs the advertiser, pays or provides other benefits for the advertisement, or provides free or discounted products or services. These requirements apply where consumers would not otherwise know that the business has a connection to the person presenting the content. Labeling Requirements for Importers The draft introduces a clearer labeling obligation for importers of label-controlled goods, who must
Read More
September 11, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has published a new five-year master plan that will bring significant regulatory changes to the broadcasting and digital media sectors, including formal licensing requirements for internet-based audiovisual services. The Master Plan for Broadcasting and Television, 3rd Edition (B.E. 2569–2573/2026–2030) was published in the Government Gazette on September 1, 2026, and will affect OTT platforms, internet-based audiovisual service providers, and traditional broadcasters. Licensing Reform The NBTC will develop new licensing frameworks ahead of existing digital television license expirations, which are slated to occur between 2028 and 2030. This creates both uncertainty and opportunity for incumbents and new market entrants. New licensing criteria will also be developed for audiovisual services delivered over the internet, meaning previously unregulated internet-based providers may face licensing, fee, and content obligations for the first time. The plan also calls for a new law to govern converged communications services. OTT Regulation and Content Oversight The plan explicitly acknowledges and aims to lessen the regulatory asymmetry between traditional broadcasters—which are subject to licensing, fees, and content regulation—and internet-based services that currently face fewer obligations. The NBTC intends to develop regulatory frameworks to bring internet-based audiovisual services, including OTT platforms, streaming services, and user-generated content platforms, under content, consumer protection, and licensing requirements. Consumer Protection and Digital Rights The NBTC will strengthen its oversight of broadcasting, television, and telecommunications operators to ensure compliance with consumer protection and personal data protection requirements. This includes updating relevant notifications and orders and more strictly enforcing rules against practices that unfairly exploit consumers. These measures may layer NBTC-specific requirements on top of Thailand’s existing Personal Data Protection Act obligations. Stricter enforcement against practices that exploit consumers is a priority, with particular scrutiny on advertising practices. The NBTC will modernize complaint resolution processes, meaning service providers should
Read More