You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

March 9, 2016

Legal Update: New Regulations in the ICT Sector in Vietnam

Subscribe to Updates

The final months of 2015 saw a flurry of new legislation in Vietnam’s Information Communication and Technology (ICT) sector. Some of the new regulations have recently taken effect, while others will become effective later in 2016. Below we provide an overview of some key legislation:

  • Information security. The new Law on Information Security is Vietnam’s first comprehensive statute in this area. Previously, data-security regulations were scattered across different pieces of legislation, such as the Law on Information Technology and the Law on Telecommunications. The new law includes, among other things, provisions on ensuring safety and security of information; protecting personal information in the network environment; and preventing spam, computer viruses, and harmful software. The Law on Information Security was passed on November 19, 2015, and will take effect on July 1, 2016.
  • Broadcasting services. Decree 06/2016/ND-CP on management, provision, and use of broadcasting services, which will come into force on March 15, 2016, regulates pay TV and the co-production of radio and TV programs. Replacing the current Decision 20 and Circular 19, Decree 06 has new, clearer regulations on Internet TV and offers some licensing exemptions for foreign channels which do not receive royalty payments. In addition, under the new decree, the number of foreign channels cannot exceed 30 percent of the total number of pay TV channels in Vietnam. The key content in Circular 19 on coproduction of radio and TV programs is retained in Decree 06, including the ban on coproduction of news and politics programs.
  • Internet resources. Circular 24/2015/TT-BTTTT on management and use of Internet resources provides additional grounds for dealing with “.vn” domain name disputes. For more information about Circular 24, please refer to our previous legal update.
  • Used IT products. The list of used IT products that are prohibited from importation has been updated in Circular 31/2015/TT-BTTTT (passed on October 29, 2015, and effective from December 15, 2015). This list notably still includes refurbished IT products, but upcoming legislation (see below) is expected to include some exceptions for refurbished goods.
  • Used machinery, equipment, and production lines. Circular 23/2015/TT-BTTT on importing used machinery, equipment, and production lines was passed on November 13, 2015, and will take effect on July 1, 2016, replacing Circular 20. Circular 23 will make it significantly easier for ICT companies to import used equipment by reducing restrictions and facilitating customs clearance.
  • Quality control of telecom services. Circular 35/2015/TT-BTTTT mainly updates the list of telecommunication services subject to quality control to keep up with the latest advances in technology. This circular came into effect on February 15, 2016.
  • Safety and security of information systems in banking operations. Circular 31/2015/TT-NHNN provides comprehensive security regulations in banking operations in areas including safety and security of information systems and management of online transaction services. Importantly, the circular clearly sets out that it applies not only to the State Bank of Vietnam and credit institutions, but also to foreign bank branches and providers of intermediary payment services—a new category not covered by the previous regulations. The new circular passed on December 28, 2015, and took effect on March 1, 2016.

In addition, a number of key regulations have been proposed which are currently still in draft form, including:

  • A circular on Over-The-Top services is currently on hold at the Ministry of Information and Communications (MIC).
  • A draft circular on cross-border service provision of public information was released for a public consultation period, which ended in June 2015. The circular is under consideration and is expected to be approved by the MIC in 2016.
  • There has been a long-pending draft of a decree on IT services, but it remains on hold.
  • A circular on the list of IT services has been drafted and released for public consultation. It is under consideration for approval. 
  • Procedures for registration of information content service provision on mobile telecommunication networks may be addressed under a new circular. A draft was released for public consultation from July 6 to September 6, 2015, and is under further regulatory review.
  • The existing Circular 12/2013 on telecom licensing may be amended. Draft amendments have been publicly released, but a timeline for the amendments is not yet available.
  • Finally, there may be a future decision of the Prime Minister to allow importation of refurbished IT products, components, and accessories, as long as they meet certain stipulated conditions.

To learn more about these regulations, please contact [email protected].

 

Download Full Article
Related Professionals

Industries

Technology

Location

RELATED INSIGHTS​ 

March 19, 2026
Thailand’s Personal Data Protection Committee (PDPC) has launched a public consultation period to gather input for a forthcoming set of guidelines under the country’s Personal Data Protection Act (PDPA). This initiative follows the PDPC’s issuance of guidelines on consent and notification requirements in September 2022. The main consultation period, using an online questionnaire to gather feedback, runs until March 23, 2026. In addition, an interview-style online session for private-sector participants was held on March 17, and a two-day in-person event will be held on April 1–2—this is already fully booked and  walk-ins will not be accepted, but the session will be livestreamed on the PDPC’s Facebook page. The PDPC will use the public feedback to design draft guidelines that accurately reflect the operational realities of both public and private organizations, after which the guidelines will be shared with the public. Consultation Scope The PDPC has identified six priority areas for which upcoming guidance may be issued: Legal bases for processing: The online questionnaire assesses respondents’ understanding of consent requirements and seeks views on priority issues, such as explanations of the legal bases and considerations for selecting an appropriate legal basis depending on the nature of the processing activity. Security measures and data breach notification: The questionnaire examines respondents’ understanding of data breach reporting and security measure obligations. Topics proposed for inclusion in the guidelines include data breach prevention measures, incident response plans, risk assessment methods, and reporting procedures. Data protection officers: Respondents are invited to share their expectations regarding the DPO’s role and their experiences in contacting a DPO. The survey also asks respondents to identify priority issues, such as response timeframes for data subject requests and complaint procedures. Marketing and direct marketing: The online questionnaire seeks input on preferred topics for guidance, including individuals’ rights to refuse marketing
Read More
March 16, 2026
Thailand’s Securities and Exchange Commission (SEC) has broadened the definition of institutional investors, expanded the types of qualifying investments, and updated financial qualification thresholds for various investor categories through a revised notification on the definitions of institutional investors, ultra-high net worth investors, and high net worth investors. The amended framework, which came into force on March 1, 2026, adds digital asset business operators, investment planners, and investment consultants to the roster of entities recognized as institutional investors, and broadens the definition of investment to account for digital tokens. Expanded Definition of Institutional Investors Under the SEC’s revised notification, the category of institutional investors now expressly includes digital asset business operators licensed under the Royal Decree on Digital Asset Businesses B.E. 2561 (2018). This addition recognizes the growing role of digital asset platforms and service providers in Thailand’s investment ecosystem and aligns the regulatory treatment of digital markets with that of traditional markets. The definition of institutional investors now also encompasses investment planners and investment consultants approved by the SEC. Previously, only SEC-approved investment analysts held this status; the expansion covers a broader scope of professionals who possess comparable expertise and experience in evaluating investment opportunities. Broadened Investment Definition The revised framework now defines investment to mean direct or indirect investment in a wider range of assets beyond deposits. Specifically, the definition covers: Securities under the Securities and Exchange Act Derivatives under the Derivatives Act Investment tokens offered to the public Government-issued digital tokens (G-tokens) as specified in a separate SEC notification This expansion ensures that financial status assessments reflect the full spectrum of an investor’s holdings, including emerging digital assets. Updated Financial Qualification Thresholds The amended SEC notification also provides updated qualification thresholds for angel investors, ultra-high net worth investors, and high net worth investors. While the core criteria
Read More
March 13, 2026
Vietnam’s Law on Intellectual Property (IP Law) has undergone continuous amendment in recent years, with the latest amendment issued at the end of 2025. Among the amended and supplemented provisions, the regulation that has perhaps attracted the most attention is a provision relating to the use of protected IP objects by artificial intelligence (AI) systems. Specifically, Article 7 of the 2025 IP Law introduces a completely new Clause 5, which reads in full as follows: “Organizations and individuals are permitted to use texts and data relating to intellectual property objects that have been lawfully published, and which the public is allowed to access, for the purposes of scientific research, experimentation, and training of artificial intelligence systems, provided that such use will not unreasonably affect the legitimate rights and interests of the authors and intellectual property rights holders in accordance with this Law. With respect to texts and data that are objects protected by copyright and related rights, the use of the texts and data as set forth herein must also be in accordance with the regulations of the Government.” Analyzing this newly added provision in the context of how it was conceived, as well as the challenges that still lie ahead, can provide some interesting insights. From Aspirations to Flight in Science and Technology From the end of 2024 and throughout 2025—the 50th anniversary of the country’s reunification—Vietnam witnessed numerous sweeping changes in many areas, including legislative development. It could be said that no sessions of the National Assembly have ever adopted as many laws, resolutions, and major policies as this one. The aspirations of the highest-level leadership have been concretized into major law and policy projects, which were drafted, developed, and passed at record speed. All of this was aimed at building a foundation for Vietnam to achieve
Read More
March 12, 2026
Thailand’s AI legislative framework took another step forward when the Office of the Consumer Protection Board (OCPB) issued a notification establishing guidelines for AI-generated advertising that may cause material misunderstanding about products or services. The notification, which is already in effect, was issued under the Consumer Protection Act B.E. 2522 (1979) and its amendments, which prohibit advertising that is unfair to consumers or may cause harm to society, including false or exaggerated statements and statements that may cause material misunderstanding about products or services. The notification addresses emerging advertising practices, including the use of images edited using software or AI to attract consumer interest or build credibility. The OCPB noted that such advertising may result in consumers misunderstanding the essential characteristics, condition, or usage of products, which violates consumer rights and causes damage. Key Requirements on AI-Generated or Digitally Manipulated Advertising Content For advertisements using still images or videos created or edited with software programs or AI tools that may cause the depicted product or service to differ from the actual product sold or service provided—which may cause misunderstanding regarding the condition, quality, quantity, or other essential aspects of the products or services—advertisers and business operators must comply with the following requirements: Prior authorization. Obtain approval from relevant regulatory authorities where required by law. Accurate representation. Ensure that the advertised size, quantity, volume, number, or composition matches the actual product or service being sold, whether in still images or videos. Mandatory AI disclosure labels. Display clear disclosures when AI or software is used to create or edit images, such as: “Real image or simulation edited using AI” “Photo from actual location or simulation edited using AI” “Photo from actual product or edited simulation” “Image created by AI” “Video created by AI” Clarity of disclosure. Ensure disclosures are clearly visible,
Read More