You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

March 18, 2024

New Telecom Services Set Out in Vietnam’s Telecom Law and Draft Decree

Subscribe to Updates

Vietnam’s new Telecom Law 2023 was promulgated on November 24, 2023, and will take effect on July 1, 2024, for most telecom services. For three newly introduced telecom services—OTT telecom services, internet data center services, and cloud computing services—implementation and compliance will be delayed until January 1, 2025. These new services will be explored briefly below.

The Ministry of Information Communication (MIC) is currently in the process of developing a number of decrees and circulars that will detail the implementation of the Telecom Law 2023, including one main decree that guides the new law in general. This decree is scheduled for prompt promulgation to coincide with the law’s effective date of July 1, 2024.

The draft version of this decree, dated February 22, 2024 (“Draft Decree”), was shared for consultation with international organizations, associations, and enterprises by the Vietnam Telecom Agency (VNTA) in early March 2024 to gather feedback. The Draft Decree is expected to undergo further revisions before being sent to relevant state agencies for input and submission to the Ministry of Justice for assessment by the end of March 2024. The MIC anticipates submitting the subsequent version to the government by April 15, 2024.

 

New Telecom Services: OTT Telecom Services, IDC Services, and Cloud Computing Services

In comparison to the Telecom Law 2009, the Telecom Law 2023 has three new telecom services:

  • Basic telecommunications services on the internet (OTT telecom services) are defined as services whose primary functions including the sending, transmission, and receipt of information between two persons or a group of people using telecommunications services on the internet (Article 3.8 of the Telecom Law 2023). By incorporating the term “primary functions” into the definition, the Telecom Law 2023 aims to exclude services such as ride-hailing platforms where the primary function is transportation, not telecom services for sending and receiving messages between users. This intention has been clearly confirmed by the VNTA in its series of consultation meetings with industry groups during the development process of the new law.
  • Internet data center (IDC) services are services that provide functions including processing, storage, and retrieving information for users via the telecom network by partially or fully leasing a data center.
  • Cloud computing services are telecom services that provide functions including processing, storage, and retrieving information for users over the telecom network via cloud computing.

Under the Draft Decree (Article 5.3), these three new services are all classified as “value-added telecom services.”

 

Indications of Light-Touch Management Principle

Unlike traditional telecom services, these three new services will be subject to a light-touch management principle. While this was not clearly provided in the new Telecom Law 2023, which left it to future decrees to provide further guidelines, the Draft Decree reflects this intention much more clearly.

Cross-border service provision: In particular, the Draft Decree excludes these three new services from the requirement of subjecting offshore companies to sign a commercial agreement with a local licensed telecom company for service provision. Providers of these three new services only need to notify the VNTA before service provision.

Nevertheless, there are certain unclear matters that require refinement in a subsequent version of the Draft Decree. One such issue is whether offshore service providers can commence services immediately after notifying the VNTA, or if they must wait for the VNTA to issue a confirmation of notification. During its meeting for gathering feedback in early March 2024, the VNTA affirmed that offshore companies could provide services immediately upon notification, eliminating the need for any confirmation, and noted that it will consider removing the confirmation requirement from the Draft Decree.

Onshore service provision: The Draft Decree has also lifted the foreign ownership restriction applied to these three new telecom services. It requires onshore service providers of OTT telecom and cloud computing services to merely notify VNTA before providing their services. Onshore IDC service providers must register with VNTA before beginning service provision.

Similarly, there is ambiguity regarding whether IDC service providers must wait for the issuance of a confirmation of registration before providing the services, or can provide the services immediately upon registration. In response to this query, VNTA clarified that IDC service providers are required to obtain a registration certificate before commencing their services.

 

Key Obligations of Service Providers

The Draft Decree introduces a few key obligations of service providers:

  • Verify information about users’ mobile phone numbers before providing services, and store users’ information (service username and mobile phone number) and information about the service usage for the duration specified in the cybersecurity law with regard to OTT telecom service providers.
  • Store and manage user information (full name and telephone or email for individuals; organization name and address, and full name, telephone or email of contact person for organizations) with regard to IDC and cloud computing services. The industry has expressed concerns that this Draft Decree might pose a trade barrier, as current trends among OTT service providers involve minimizing the collection and storage of users’ personal information, aligning with their obligations for personal data protection. By reducing the collection and storage of personal information, not only are costs lowered, but the risk of user data leakage during system attacks is also diminished. Despite these concerns, VNTA has justified the inclusion of telephone numbers, asserting that they are essential for tracking violators in the event of violations through OTT services. Furthermore, VNTA highlighted the effective management of junk SIM cards by the MIC, reducing the risk of being unable to trace individuals based on such junk SIM cards. It is worth noting that the name provided to OTT service providers is the service username, not the actual name of the users.
  • Protect state secrets pursuant to the law on protection of state secrets: This requirement introduces compliance risks as service providers primarily serve as intermediaries without direct access to user information, which is typically encrypted. In response, VNTA has expressed an intention to review and clarify the wording, emphasizing that the obligation applies when service providers are aware of violations but fail to comply with authorities’ requests to prevent or stop such violations.
Related Professionals

Industries

Technology

Location

RELATED INSIGHTS​ 

March 30, 2026
On March 24, 2026, the Trade Competition Commission of Thailand (TCCT) published its long-anticipated Guidelines on Multi-Sided Platforms and E-Commerce Businesses in the Government Gazette, following the conclusion of a public hearing conducted last year. The guidelines entered into force on March 25, 2026, and significantly expand the application of Thai competition law to digital platform ecosystems. These rules introduce targeted restrictions on platform conduct, such as price-ranking algorithms and tying and bunding, that leverages network effects, and will have far-reaching implications across Thailand’s digital economy—affecting not only platform operators but also platform participants, including sellers, logistics providers, advertisers, and payment service providers operating on or alongside such platforms. The guidelines clarify how existing prohibitions under the Trade Competition Act B.E. 2560 (2017) (TCA)—including abuse of market dominance, cartel conduct, and unfair trade practices—apply in the context of platform-based business models. While many provisions reflect earlier draft guidelines, the final version delivers more precise definitions and clearer enforcement parameters, increasing regulatory certainty while also raising compliance expectations. Applicability The guidelines introduce core definitions that determine their coverage: Multi-sided platform: A platform that acts as an intermediary connecting two or more groups of users, enabling them to have direct interaction in order to exchange or rely on services from one another. Examples include digital platforms for trading goods or services (e-commerce), as defined below. Digital platform for trading goods or services (e-commerce): A platform that acts as an intermediary connecting the distribution, purchase, sale, or exchange of goods or services. This includes operations carried out to facilitate transactions or interactions between business operators through an electronic transaction system, regardless of whether a service fee is charged. Operator of a digital platform business for trading goods or services: A provider of digital platform services for trading goods or services, as described
Read More
March 27, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has publicly indicated that it is preparing a new regulatory framework for data center operators that may introduce foreign-ownership restrictions. In particular, the NBTC is considering reclassifying data center operations from a type 1 telecommunications business license to a type 3 license. If implemented, this change would subject data center operators to a significantly more stringent regulatory regime, especially in relation to foreign ownership and control. The NBTC has indicated that it intends to propose a draft framework to the NBTC board. This would be followed by a public hearing process, with a view to implementing the new rules within 2026. Under the Telecommunications Business Act B.E. 2544 (2001), as amended, telecommunications businesses operating under type 3 licenses are subject to foreign ownership restrictions, including a requirement that less than 50% of the total issued shares be held by foreign shareholders. In addition, type 3 licensees are subject to foreign dominance restrictions, which prohibit arrangements that allow foreigners to dominate the business. These foreign dominance restrictions are broad in scope and may capture various forms of direct and indirect control or influence. This includes circumstances in which a foreign national is able to influence or control the formulation of policy, management, or business operations, or the appointment of directors or senior executives. At this stage, the exact scope of the proposed rules remains unclear. Businesses with existing or planned data center operations in Thailand should therefore monitor upcoming NBTC developments in this regard and prepare for the expected public hearing process.
Read More
March 27, 2026
Vietnam’s emerging governance framework for artificial intelligence (AI) is developing through a multi-layered structure comprising three components: Policy instruments setting national priorities for AI development; Regulatory framework governing development, provision, deployment and use of AI; and Technical standards and voluntary guidelines. Policy level. At policy level, the foundation for a strategic framework for AI development and governance was laid in 2021 by the National Strategy for Research, Development and Application of AI until 2030, aimed at strengthening the national AI ecosystem and positioning Vietnam as a regional AI innovation hub. Subsequently, resolution No.57-NQ/TW (2024) identified AI as a key driver of science, technology, innovation and national digital transformation. AI was also designated as a strategic technology under decision No.1131/QD-TTg (2025) listing priority technologies across sectors. Regulatory framework. At the legislative level, the new Law on Artificial Intelligence took effect on 1 March 2026, establishing the core regulatory framework governing development, provision, deployment and use of AI systems. Controlled testing for emerging AI technologies is implemented under the Law on Science, Technology and Innovation. The AI Law is expected to be further operationalised through implementing instruments, most notably a draft decree guiding the AI Law, and draft decision of the prime minister identifying high-risk AI systems (both published in February 2026). A decision establishing priority datasets for AI development is also anticipated. Compliance obligations may also arise under sectoral regulatory regimes, including data protection, cybersecurity, banking, consumer protection, e-commerce and intellectual property, particularly where AI systems are used in automated decision-making or data-driven services. Technical standards and non-binding guidelines. Vietnam’s AI governance framework is also supported by technical standards and voluntary guidelines. A key instrument is decision No.1290/QD-BKHCN (2024), providing guidelines for responsible research and development of AI systems, and represents Vietnam’s first national AI ethics code. The Ministry of Science and Technology
Read More
March 27, 2026
In response to the rapid advancement of artificial intelligence (AI) and evolving global digital trends, Thailand has undertaken significant efforts to establish a comprehensive national policy framework aimed at fostering an AI ecosystem. This framework seeks to promote the responsible development and deployment of AI technology to enhance Thailand’s economic competitiveness and improve quality of life, with targeted implementation by 2027. In furtherance of this national AI policy, regulatory authorities have initiated efforts to develop and refine the applicable legal framework, including the drafting of Thailand’s first unified AI legislation. Pending the composing and enactment of such comprehensive legislation, sector-specific regulators have proactively issued guidelines applicable to regulated entities within their respective jurisdictions, including financial institutions, banks, insurance companies, securities and derivatives business operators, and digital asset service providers. Concurrently, cross-sectoral regulatory bodies, notably the Personal Data Protection Committee (PDPC) and the National Cyber Security Agency (NCSA), have promulgated guidelines applicable to all business operators within their regulatory purview. While unified AI legislation has not been enacted, the design, development and use of AI in Thailand in various industries is still subject to existing sector-specific legislation. National AI policy The Thai cabinet approved the Thailand National AI Strategy and Action Plan (2022-2027) in July 2022, aiming to establish an AI development and application ecosystem by 2027. The strategy is built around five pillars: Preparing social, ethical, legal and regulatory readiness for AI; Developing national infrastructure; Increasing human capability and AI education; Driving AI technology and innovation; and Promoting AI adoption in public and private sectors. The above-mentioned national AI committee, under the National Digital Economy and Society Committee (NDESC), was established in August 2022, chaired by the prime minister. Comprehensive legislation Following the national AI strategy, the government has been developing comprehensive AI legislation to govern and promote AI
Read More