You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

April 30, 2026

New Decree Strengthens Vietnam’s Copyright Framework in the AI Era

Managing Intellectual Property

Vietnam’s Decree No. 134/2026/ND‑CP, which took effect on 9 April 2026, plays an important role in detailing and implementing Vietnam’s Intellectual Property (IP) Law in the context of rapid digital transformation and the growing application of artificial intelligence (AI). The new decree provides comprehensive guidance on the application of copyright and related‑rights regulations, addressing key issues such as authorship, ownership, statutory exceptions and limitations, registration procedures, and enforcement mechanisms.

Through these measures, Decree 134 seeks to achieve an appropriate balance between safeguarding the legitimate interests of rightsholders and fostering innovation, research, and technological advancement, thereby strengthening the state’s framework for the effective management, protection, and exploitation of intellectual property in the digital and AI‑driven environment.

Some notable aspects of Decree 134 are discussed below.

Copyright for AI-Created Works

Decree 134 provides important guidance on the determination of copyright and related rights in works created with the assistance of AI. Article 5a reaffirms the principle that human creativity remains central to copyright protection, clarifying that copyright or related rights arise only where a human makes a substantial and decisive intellectual contribution, exercises effective control over the creative outcome, and assumes responsibility for the content and its legality.

At the same time, the provision confirms that AI is regarded solely as a technological tool rather than a rights‑holding subject, thus ensuring consistency with the fundamental concepts of authorship and ownership under the IP Law. By introducing requirements on transparency, proof of human contribution, and compliance with AI‑specific labelling and technical marking obligations, Decree 134 establishes a clear and enforceable legal framework for the responsible use of AI in creative activities.

Lawful Use of Copyrighted Texts and Data

Article 37a of Decree 134 sets out the specific conditions under which copyrighted texts and data may be lawfully used for scientific research, experimentation, and the training of AI systems, requiring that such use be based on lawfully published materials, accessed from legitimate sources, and conducted without circumventing or disabling technological protection measures implemented by rightsholders. It further establishes substantive limitations to ensure that such use does not conflict with the normal exploitation of protected works, does not cause unreasonable prejudice to the legitimate interests of authors, performers, and rightsholders, and does not result in AI outputs that substitute the market or create unfair competition with protected subject matter.

The right of authors, performers, and rightsholders to reserve their copyright and related rights against this use of protected texts and data is also recognized under Article 37b. Such reservations must be exercised through clear and publicly accessible mechanisms, including machine‑readable rights‑management information, technological protection measures, or public declarations made via authorized collective management organizations. This reservation right specifically does not apply where the use of texts and data fully satisfies the strict conditions set out in Article 37a.

Users of copyrighted texts and data for research, experimentation, and AI training are required  to retain technical records, training data, and usage data in accordance with applicable AI‑related regulations, and to provide such information to competent authorities upon request for verification, dispute resolution, or enforcement purposes. In addition, Article 37c reinforces the obligation to respect the reservation of rights exercised by rightsholders, notably clarifying that where AI‑trained systems are commercially exploited, users must comply with the foregoing obligations and fulfill royalty‑payment duties in accordance with the law, ensuring that AI innovation is aligned with fair remuneration and effective rights protection.

Specialized Database on Copyright and Related Rights

To strengthen the institutional framework for copyright protection and enforcement in the digital environment, Decree 134 introduces a centralized, specialized database on copyright and related rights. This publicly accessible database will consolidate key data on registrations, collective management organizations, royalty tariffs, intermediary service providers, and other relevant matters to enhance information sharing, regulatory oversight, and lawful access, while ensuring compliance with data‑protection and confidentiality requirements.

Copyright Exclusions

Article 8.4 clarifies the scope of subject matter excluded from copyright protection by providing detailed interpretations of ideas, slogans, and the independent title of a work. The provision reaffirms that ideas or creative concepts not fixed in a material form, slogans lacking independent creativity beyond ordinary linguistic expression, and titles considered separately from the content of the work do not constitute protected works.

Legal Validity of Electronic Registration Certificates

Article 38.9 formally recognizes the legal validity of electronic copyright and related‑rights registration certificates, an important step toward modernizing copyright administration. The provision authorizes the competent authority to issue certificates in electronic form as the default, while allowing paper certificates to be issued upon request, and confirms that electronic certificates have the same legal value as paper documents.

Suspension of Examination During Disputes

Under Article 39.2a, the relevant authority must temporarily suspend the examination of registration applications where the subject matter is involved in an ongoing dispute, complaint, denunciation, or criminal investigation relating to IP infringement. By requiring formal notification to applicants and clearly defining the duration of such suspension, this important procedural safeguard helps prevent the issuance of registration certificates that could interfere with judicial, arbitral, or investigative proceedings, while ensuring procedural fairness through the resumption of processing or the return of applications once the suspension period ends.

A Promising Step Forward

In summary, Decree 134 represents a significant step forward in modernizing and strengthening Vietnam’s copyright and related‑rights framework in response to rapid digital transformation and the growing impact of AI. By providing detailed guidance on AI‑assisted creation, lawful data use for AI training, rightsholder reservations, user responsibilities, registration procedures, and digital administration, the decree enhances legal certainty and regulatory coherence while maintaining a human‑centric approach to copyright protection.

At the same time, it reinforces transparency, accountability, and fair remuneration, ensuring that technological innovation proceeds in harmony with the legitimate interests of authors, performers, and rightsholders. Taken together, these measures demonstrate the state’s commitment to effective IP management and to fostering a balanced, sustainable environment for creativity, innovation, and economic development in the digital and AI‑driven landscape.

This article first appeared in Managing Intellectual Property.

RELATED INSIGHTS​ 

April 3, 2026
On March 16, 2026, Vietnam’s Ministry of Public Security released a draft version of a new Decree on the Prevention and Combating of Cybercrime and High-Tech Crime to replace the currently effective Decree 25/2014/ND-CP. In the draft, the ministry has proposed a comprehensive regulatory framework aimed at addressing violations occurring within the cybersecurity domain, including measures related to intellectual property. Acts of Online IP Infringement Article 9 of the draft decree notably introduces specific provisions addressing online intellectual property infringement, with detailed lists of acts considered to constitute infringement in the online environment. Copyright and related rights infringement includes: Uploading or sharing works, performances, sound recordings, video recordings, broadcasts, computer programs, software, research, documents, theses, or other intellectual creations on digital platforms without the consent of the rights holder. Unauthorized livestreaming of copyrighted television programs, sporting events, or artistic performances. Uploading, sharing, storing, transmitting, or providing links to infringing works or digital content via websites, social networks, applications, or digital platforms. Providing or using software, tools, devices, or access codes to circumvent technological protection measures or evade lawful control mechanisms implemented by rights holders. Using artificial intelligence (AI) tools to replicate the ideas or structure of another person’s work without significant new creativity or without proper attribution, thereby causing damage to the original author. Industrial property infringement includes: Manufacturing, trading, advertising, or distributing counterfeit goods bearing counterfeit trademarks, geographical indications, or industrial designs, as well as goods infringing industrial property rights through online platforms. Unauthorized registration, appropriation, or use of domain names, account names, or digital identifiers that create confusion regarding the rights holder or the origin of goods or services. Producing, using, or offering for sale products containing all or part of a patented invention via online platforms. Advertising or introducing products with technical features or characteristics identical
April 3, 2026
Thailand’s Securities and Exchange Commission (SEC) has established a comprehensive governance framework for the use of artificial intelligence and machine learning (AI/ML) in the capital markets. The framework provides guidance to capital market business operators on understanding the risks associated with AI/ML implementation and adopting appropriate practices to build public confidence in Thailand’s capital markets. While the guidelines are principle-based rather than prescriptive, they reflect the SEC’s expectations for responsible AI/ML governance and are likely to inform supervisory activities and industry standards going forward. Scope The framework applies to capital market business operators supervised by the SEC. This includes, for example, securities and derivatives firms, asset management companies, mutual fund and private fund managers, investment advisors and investment consultants (including robo-advisory service providers), derivatives intermediaries, and other licensed intermediaries and market operators in the Thai capital markets that deploy AI/ML in their operations. Core Principles of the Guidelines The framework is presented as a best-practice manual rather than prescriptive regulation, providing guidance that regulated entities may apply to their AI/ML governance and risk management as appropriate. While currently nonbinding, the guidelines signal the SEC’s expectations for the sector, particularly in relation to other binding SEC regulations such as those covering IT risk management and market conduct. The guidelines name four core principles for AI/ML deployment: Fairness: Design and develop AI/ML with consideration for fairness, equality, and social diversity to prevent discrimination against individuals or groups. Legal and ethical compliance: Ensure AI/ML use aligns with applicable laws, ethical standards, and organizational values and policies. Accountability: Establish clear responsibility—both internally and externally—for AI/ML activities and outcomes. Transparency: Provide adequate disclosure to users about AI/ML use, including explainability of decisions and traceability of activities. AI/ML Best Practices The guidelines prescribe best practices across four stages of the AI/ML lifecycle, as described below.
April 2, 2026
Thailand’s Personal Data Protection Act (PDPA) enforcement has entered a new phase, and the insurance industry is squarely in the regulatory spotlight. The Personal Data Protection Committee (PDPC) considers insurers “large-scale” processors of sensitive data—including health records, financial information, and biometric data—making the sector a focal point for enforcement action. In August 2025 alone, the PDPC issued administrative fines totaling THB 21.5 million, and fines for individual violations have ranged from THB 50,000 to THB 2 million. The PDPC has also deployed its “Eagle Eye Crawler,” an AI-driven surveillance tool that monitors websites around the clock for data leaks and noncompliant privacy notices. This article highlights the key regulatory developments directly affecting insurers and outlines practical steps toward compliance. What Has Changed: OIC and PDPC Alignment The Office of Insurance Commission (OIC) has synchronized its sector-specific rules with the PDPA through the Notification on Customer Personal Data Protection (No. 2) B.E. 2568 (2025). The combined effect of the PDPC’s general enforcement push and the OIC’s sectoral guidance creates four critical compliance areas for insurers. Consent unbundling. Consent for marketing must be strictly separated from the core insurance contract; bundling marketing consent into the policy application is no longer permissible. Agent and intermediary oversight. Insurance intermediaries are generally classified as data processors, meaning that insurers—as data controllers—must provide specific written instructions and security protocols to all agents and brokers. A 2026 enforcement trend shows controllers being held liable for the “weak security” of their vendors and downstream processors. Enhanced privacy notices. Insurers must provide a summary privacy notice alongside the full policy, plainly stating categories of data, purposes, lawful bases, disclosure recipients, cross-border transfers, retention periods, data subject rights, and easy marketing opt-out channels. DPO registration and ROPA. All organizations involved in “regular or systematic monitoring of data subjects on
March 30, 2026
On March 24, 2026, the Trade Competition Commission of Thailand (TCCT) published its long-anticipated Guidelines on Multi-Sided Platforms and E-Commerce Businesses in the Government Gazette, following the conclusion of a public hearing conducted last year. The guidelines entered into force on March 25, 2026, and significantly expand the application of Thai competition law to digital platform ecosystems. These rules introduce targeted restrictions on platform conduct, such as price-ranking algorithms and tying and bunding, that leverages network effects, and will have far-reaching implications across Thailand’s digital economy—affecting not only platform operators but also platform participants, including sellers, logistics providers, advertisers, and payment service providers operating on or alongside such platforms. The guidelines clarify how existing prohibitions under the Trade Competition Act B.E. 2560 (2017) (TCA)—including abuse of market dominance, cartel conduct, and unfair trade practices—apply in the context of platform-based business models. While many provisions reflect earlier draft guidelines, the final version delivers more precise definitions and clearer enforcement parameters, increasing regulatory certainty while also raising compliance expectations. Applicability The guidelines introduce core definitions that determine their coverage: Multi-sided platform: A platform that acts as an intermediary connecting two or more groups of users, enabling them to have direct interaction in order to exchange or rely on services from one another. Examples include digital platforms for trading goods or services (e-commerce), as defined below. Digital platform for trading goods or services (e-commerce): A platform that acts as an intermediary connecting the distribution, purchase, sale, or exchange of goods or services. This includes operations carried out to facilitate transactions or interactions between business operators through an electronic transaction system, regardless of whether a service fee is charged. Operator of a digital platform business for trading goods or services: A provider of digital platform services for trading goods or services, as described