You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

April 8, 2020

New Penalties for Posting Fake News on Social Networks

On February 3, 2020, the Vietnamese Government issued Decree No. 15/2020/ND-CP stipulating penalties for administrative violations in the fields of postal services, telecommunications, radio frequency, information technology, and electronic transactions (“Decree 15”). Decree 15 will replace the existing decree on penalties in the technology and telecom sectors (Decree No. 174/2013/ND-CP) and will take effect on April 15, 2020.

One of the most notable features provided by Decree 15 is the introduction of specific administrative penalties for users who post or share fake news on social networks, which will be imposed in addition to any civil and/or criminal liabilities related to distortion, slander, defamation and the like.

Penalties for Social Network Users

In particular, Article 101 of Decree 15 sets out the penalties for violations of regulations on the use of social networks. These include administrative fines of between VND 10 million (approx. USD 430) and VND 20 million (approx. USD 860) on social network users who commit the following violations:

  1. Posting or sharing false information (fake news) or untruthful, distorted, or slanderous information that offends the reputation of agencies or organizations or the honor and dignity of individuals;
  2. Posting or sharing information that advocates unsound customs, superstition, obscenity, or depravity which is not in line with the traditions and fine customs of the nation;
  3. Posting or sharing graphic depictions of acts of slashing, killing, accidents, or horror;
  4. Posting or sharing fabricated information that causes panic among the population or incites violence, crime, social evils or gambling, or that serves gambling activities;
  5. Posting or sharing press, literature and art works or publications without the permission of the copyright holder, or works that have not been approved for circulation, or have been banned or revoked;
  6. Advertising, promoting, or sharing information about banned goods and services;
  7. Posting or sharing inaccurate maps of Vietnam;
  8. Posting or sharing links to websites with banned content.

Higher administrative fines of VND 20 million (approx. USD 860) to VND 30 million (approx. USD 1,290) are imposed on the disclosure of information classified as state secrets or personal secrets, but which is not serious enough to face criminal punishment.

Moreover, in all of the above cases, the violators would also be required to remove the fake news or violating content that was posted or shared.

Penalties for Social Network Providers

Correspondingly, Decree 15 also imposes additional penalties on social network providers who fail to prevent fake news from being posted on their social networks.

In particular, Article 100.3 of Decree 15 imposes an administrative fine of VND 50 million (approx. USD 2,130) up to VND 70 million (approx. USD 3,000) on social network providers who fail to block or remove violating information (including fake news) from their platforms, and/or who intentionally provide, store, or transmit the violating content listed in items 1-7 above, or information that is considered not to be in the country’s interest.

Violating social network providers would also be required to remove the fake news or violating content that was posted or shared, and be subject to suspension of their social network license and/or revocation of their social network’s domain name.

Penalties in Other Fields

In addition to the foregoing newly stipulated penalties on fake news, the administrative penalties on various other violations in the fields of postal services, telecommunications, radio frequency, information technology and electronic transactions have also been overhauled. For example, penalties related to data privacy and security have been slightly increased. Notably, penalties on violations related to collecting personal information without consent are increased from VND 10 million (approx. 430) to VND 20 million (approx. USD 860); and penalties on violations related to adopting adequate cybersecurity measures are increased from VND 20 million (approx. USD 860) to VND 50 million (approx. USD 2,150).

For more information on Decree 15, please contact us at [email protected].

RELATED INSIGHTS​ 

September 21, 2023
Myanmar’s Ministry of Commerce has announced its E-commerce Guidelines to regulate stakeholders engaging in e-commerce. The guidelines—which were issued on September 5, 2023, and took immediate effect—are mandatory for e-commerce business operators (both entities and individuals), and failure to comply with the guidelines’ requirements may result in penalties under relevant laws. The E-commerce Guidelines come as Myanmar seeks to increase its regulation of e-commerce activities. The guidelines were preceded by a July 2023 notification requiring e-commerce business operators to register their activities with the Ministry of Commerce by January 21, 2024. Definitions “E-commerce” is defined as the sale of goods or services on the internet or other digital platforms. The term also covers sales promotions, marketing, logistics, ordering, and delivery. An “e-commerce platform entrepreneur” is a person who manages an e-commerce platform where two or more entrepreneurs can conduct e-commerce. An “e-commerce business operator” is a person operating or authorized to operate e-commerce activities. This includes e-commerce platform entrepreneurs, entrepreneurs selling on e-commerce platforms, and sellers through social media platforms. Electronic Contracts Acceptable forms of electronic contracts, which must comply with the Electronic Transactions Law, Contract Act, and other relevant laws, include: Click-wrap, click-through, and web-wrap contracts; Browse-wrap contracts; and Agreements between seller and buyer on social media platforms, such as by accepting or rejecting an offer via direct message. Samples of contract forms are appended to the guidelines. Consumer Protection Disclosure notices for consumers must be comprehensible, correct, consistent, simple, accessible, and visible. They can be written in Myanmar language, English, or Myanmar language and another language. They must also comply with the relevant provisions of the Consumer Protection Law. The guidelines provide that if the agreed delivery date is eclipsed by more than 15 days, the consumer may terminate the contract and request a full refund of
August 31, 2023
When your company suffers a data breach, taking prudent, careful action can limit and perhaps even rectify some of the damage. First of all, it is important to document everything, starting with the time the data breach was discovered. Secure the data systems and preserve all evidence so that investigators can determine what happened, and begin following the protocol that all companies handling personal data should have in place to guide their data breach response. It is also crucial to seek timely legal assistance to ensure that every aspect of the response is planned and carried out according to the law. While applicable legal advice for each situation can only be obtained by consulting a legal advisor, this guide gives an overview of what companies in Southeast Asian jurisdictions can expect if they suffer a data breach. This guide from Tilleke & Gibbins is a quick-reference resource covering key regulatory issues regarding data breach responses in Cambodia, Laos, Myanmar, Thailand, and Vietnam. The full guide can be downloaded through the button below.
August 23, 2023
Introduction The idea of the metaverse rose to prominence in the public discourse in 2021, most notably when Facebook renamed itself Meta and announced a new focus on launching a virtual, immersive world. The initial excitement around the metaverse has since faded, with worsening economic conditions having a particularly acute effect on companies in the technology sector. When Meta CEO Mark Zuckerberg announced in March 2023 that artificial intelligence (AI) was the company’s “single largest investment,” many took this as a sign of the company shifting focus away from the metaverse. However, there remains significant interest in the metaverse from both businesses and consumers. Zuckerberg himself reaffirmed Meta’s focus on the metaverse, highlighting how developments in AI will improve virtual reality (VR) and augmented reality (AR) technology. Meanwhile, Roblox, a metaverse gaming platform, announced that in Q1 2023, its number of daily active users had increased to 66 million. Most recently, the announcement by Apple of its new ‘Vision Pro’ AR headset is reported to have renewed interest in the metaverse among developers. A particular area of interest in the developing metaverse is digital fashion and retail. In its Metaverse Fashion Trends Report 2022, Roblox found that nearly three in four users aged 14 to 24 spend money on digital fashion items. Roblox itself has partnered with fashion brands Burberry, Gucci, Tommy Hilfiger, and others, to offer experiences and items for use on the platform. In March 2023, Decentraland, a metaverse platform with a decentralized governance structure, hosted the Metaverse Fashion Week, featuring brands such as Adidas, Coach, and DKNY. As businesses continue to invest and look for opportunities to expand into the metaverse, whether through traditional e-commerce or more innovative digital asset offerings, it is important that they consider the ways in which new and existing laws apply
August 22, 2023
On August 17, 2023, the Thai government rolled out a royal decree that provides certain exemptions to data controllers’ obligations under the Personal Data Protection Act B.E. 2562 (PDPA). The royal decree, which will come into effect after the lapse of 150 days from its publication in the Government Gazette, reflects the government’s ongoing quest to strike a balance between privacy, state interests, and the data protection regulatory burden on organizations. The royal decree seeks to clarify the circumstances in which data controllers—including business operators and state agencies—are exempt from certain PDPA requirements on the collection, use, and disclosure of personal data and data subject rights. In doing so, it establishes three foundational pillars in considering exemptions: Collection or requests for personal data are to be for the public interest pursuant to the purpose and scope prescribed by any law authorizing a state agency to carry out a certain action, without imposing an undue burden on the data controller responsible for disclosing the personal information. Data controllers can share personal data without the data subject’s consent if legally authorized state agencies request it and specify the statutory provisions granting authority to request the data. Data subjects and data controllers of requested personal data must have the right to submit complaints to the PDPA’s Expert Committee or seek its expertise for clarification or determination. Under the three foundational pillars, data controllers will be partially exempted from certain requirements under the PDPA when the following state agencies request personal data: The National Anti-Corruption Commission or other government entities with mandates aligned with anticorruption laws; The Revenue Department, Customs Department, Excise Department, or other governmental units operating under taxation laws; Local governmental bodies recognized by the Personal Data Protection Committee (PDPC), or any government unit with mandates as per the laws related