You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

February 28, 2025

Unpacking Vietnam’s Decree 163: Key Implications for Telecom Service Providers

Vietnam’s Decree No. 163/2024/ND-CP (Decree 163), which has been in full effect since January 1, 2025, provides crucial guidance on the implementation of Vietnam’s 2023 Telecom Law. Decree 163 replaced Decree No. 25/2011/ND-CP dated April 6, 2011 (Decree 25), which guided the implementation of the previous 2009 Telecom Law, and introduces many notable changes to the regulations on telecom service provision. Some key changes that will impact businesses engaged in the telecom sector in Vietnam are detailed below.

1. Classification of Telecom Services

The classification of telecom services into “basic telecom services” and “value-added telecom services” has been retained, in alignment with Vietnam’s WTO commitments in the telecom sector. However, Decree 163 expands the scope of both categories, as follows:

  • Basic telecom services: “Transmission services for machine-to-machine (M2M) communication” and “leasing services of all or part of the telecom network” are added. “Image transmission services” is changed to “transmission services for radio and television.”
  • Value-added telecom services: “Data center services,” “cloud computing services,” and “basic telecom services over the internet” (also known as over-the-top (OTT) telecom services) are added.

2. M2M Communication Services

Since M2M communication services are classified as basic telecom services, without exception, they are subject to the same regulatory framework. Specifically:

  • Cross-border provision: M2M communication services provided across borders must be conducted through a commercial agreement with a Vietnamese telecom enterprise licensed to provide telecom services with an international communication scope.
  • Onshore provision: Onshore M2M communication services will require a telecom license.

3. New Telecom Services (Data Center, Cloud, and OTT Telecom Services)

The 2023 Telecom Law adopted a light-touch management approach for data center, cloud, and OTT telecom services by not requiring the same licensing as previously regulated value-added telecom services, but instead mandating registration or notification before service provision. Decree 163 offers clearer guidance on this approach, specifically:

  • Cloud and OTT telecom services: Both onshore and offshore providers are required to notify the Vietnam Telecommunications Authority (VNTA) under the Ministry of Information and Communications (MIC).
  • Data center services: Offshore providers of data center services only need to notify the VNTA while onshore providers must register with the VNTA.

The required dossiers for notification and registration must be prepared in Vietnamese, following prescribed forms, and can be submitted in person, via postal service, or through the national public service portal. For onshore enterprises providing both data center and cloud computing services, only a registration form needs to be submitted, with cloud service details included in the same form.

Decree 163 specifies a relatively short timeline of three working days for processing these dossiers.

Key Obligations for Service Providers

Enterprises providing these three new services, which can include 100% foreign-owned enterprises in Vietnam, must fulfill certain obligations in addition to registration or notification requirements. These key obligations include storing and managing user information, user verification, and various specific obligations of onshore and offshore providers.

Offshore data center and cloud computing service providers also have certain additional obligations, such as promptly taking necessary measures to block access to information as requested by competent authorities.

Further, Decree 163 imposes certain obligations when data center and/or cloud services are provided to state agencies to serve state activities, such as storing data of the state agencies using these services within Vietnam.

4. Satellite Telecom Services

Onshore service provision: Decree 163 retains the conditions for the establishment of public fixed satellite and mobile satellite telecom networks regarding the charter capital and telecom network deployment from the previous Decree 25, including the commitment to invest at least VND 100 billion in the telecom network within the first three years.

Cross-border service provision: For providing cross-border telecom services via fixed satellite networks or mobile satellite networks, among other conditions, offshore providers must enter into a commercial agreement with a Vietnamese telecom enterprise licensed to provide telecom services with an international communication scope.

5. Telecom Market Management

Decree 163 introduces criteria for identifying telecom service markets under state management, and establishes criteria for identifying telecom enterprises and groups of enterprises with dominant market positions in state-managed service markets, using quantifiable principles suitable for telecom business activities. The decree tends to impose certain obligations on the identified telecom enterprises and groups of enterprises to ensure fair competition in the market.

6. Telecom Infrastructure Management

The development of telecom infrastructure in Vietnam is one of the key focuses of Decree 163, which covers the following main aspects of telecom infrastructure management, among others:

  • Protecting telecom infrastructure: Telecom enterprises are responsible for ensuring the safety of telecom infrastructure, including preventing attacks and incidents, maintaining stability with backups, preventing prohibited activities, ensuring safety for equipment and staff, and adhering to relevant standards and technical regulations.
  • Ensuring network information security: Telecom enterprises must ensure network information security in their operations by, among other measures, protecting information systems and handling incidents at the request of the MIC.
  • Sharing of passive telecom infrastructure: Decree 163 stipulates the authority to resolve the sharing of passive telecom infrastructure in cases where telecom enterprises cannot reach an agreement (except for price issues). The resolution of disputes will be handled by either the local Department of Information and Communications or the MIC, depending on the location of the passive telecom technical infrastructure in question. If the parties cannot reach an agreement on the price for sharing passive telecommunications infrastructure, negotiations must be carried out in accordance with the provisions of the pricing laws.
  • Sharing of active telecom infrastructure: The sharing of active telecommunications infrastructure among telecom enterprises is based on the principle of encouraging sharing to save costs for telecom network deployment, while ensuring compliance with competition law and radio frequency law.

7. Management of Mobile Subscriber Information

Decree 163 dedicates a section to the management of mobile subscriber information, offering comprehensive regulations on the subject. These include methods for registering mobile subscriber information, required documents for registration, verification of subscriber details, the scope of subscriber information, service provision after registration, registration for prepaid subscribers, storage and usage of subscriber data, subscriber responsibilities, and telecom enterprises’ obligations in addressing subscribers with incorrect information.

Business Recommendations

The 2023 Telecom Law, as detailed by Decree 163, demonstrates the government’s clear intent to catch up to and regulate recent advancements, innovations, and emerging business models in the technology and telecom sectors. The following are some recommendations for businesses:

  • Adopt proactive compliance strategies: Ensure familiarity with classifications and specific regulatory obligations for telecom services. Especially, businesses operating in the areas of M2M communication, cloud computing, data center services, and OTT telecom services should update internal compliance systems to address new requirements in these areas to avoid potential non-compliance risks.
  • Leverage emerging opportunities: With the government’s goal of opening markets and attracting foreign investment through incentives that support digital transformation, businesses should consider expanding and investing in areas like cloud computing, OTT services, and data centers to capitalize on emerging opportunities.
  • Adapt to digital transformation trends: Pay close attention to the new regulations aimed at facilitating digital transformation. For instance, consider investing in the development or optimization of mobile applications for subscriber registration and verification to align with the digital transformation push.
  • Strengthen data security and privacy practices: With increased regulatory focus on telecom infrastructure security and network information security, businesses should prioritize robust cybersecurity and network information security measures.

By navigating Decree 163 proactively, telecom enterprises can position themselves for sustainable growth while contributing to Vietnam’s digital economy ambitions.

RELATED INSIGHTS​ 

September 22, 2025
On September 15, 2025, Vietnam’s Ministry of Science and Technology announced that the country will issue an updated version of its National AI Strategy (first issued in 2021) and its first-ever AI Law by the end of this year. The ministry emphasized that the AI strategy is not just a legal framework, but a commitment to embracing AI to drive Vietnam into a new era. The AI adoption plan is set as a priority of the country, and marks a significant step in shaping Vietnam’s AI governance and innovation landscape. Highlights of the plan include the following: Strategic vision. Vietnam’s ambition is to leverage AI for economic growth, social development, and global competitiveness, under the guiding principle “AI for humans – safe, autonomous, cooperative, inclusive, and sustainable.” AI as national infrastructure. The updated strategy positions AI as core national infrastructure, comparable to electricity or the internet, aiming to provide every citizen with a “personal digital assistant.” Core principles for AI legislation. The AI Law will be built around the following six core principles: Risk-based regulation Transparency and accountability Human-centric development Domestic AI autonomy AI as a driver of sustainable growth Digital sovereignty, with data, infrastructure, and AI technology being three strategic pillars Ethics and openness. A National AI Ethics Code will accompany the upcoming law, aligned with international standards but tailored to the Vietnamese context. The government emphasizes open standards and open-source development. Market development and incentives. The government plans to expand domestic AI adoption, particularly in public services and key industries. The National Technology Innovation Fund (NATIF) will allocate at least 40% of its budget to AI projects, prioritizing SMEs through vouchers for locally developed AI solutions. Background on AI Law Development Regulations on AI are found in various Vietnamese laws and regulations, notably the recently adopted Law
September 12, 2025
On September 10, 2025, Vietnam’s National Credit Information Center (CIC) reported to the Vietnam Cybersecurity Emergency Response Team (VNCERT) a suspected significant cybersecurity incident involving unauthorized access to the CIC’s credit information database. A hacker group has claimed responsibility and allegedly posted over 160 million records for sale, including sensitive personal and financial data. Implications for Banks and Financial Institutions Companies that share customers’ or potential customers’ personal data with the CIC for credit scoring or other purposes—and continue to act as a data controller for such data—may be obligated under Vietnam’s Personal Data Protection Decree (PDPD) and related regulations to: Notify A05 (Department of Cybersecurity and High-Tech Crime Prevention) and the State Bank of Vietnam without delay. Inform affected individuals if their personal data is at risk. Recommended Actions Companies that could be impacted by this data breach should take the following actions: Conduct an internal review of CIC-related data in their systems, and identify whether and how the systems have been affected by this incident. Assess whether to notify regulators and customers/potential customers. Enhance cybersecurity controls, monitor for suspicious activity, and implement additional safeguards to prevent secondary breaches.
September 11, 2025
Thailand’s Securities and Exchange Commission (SEC) has amended its digital asset regulations to permit the offering, trading, and provision of services related to tokenized environmental commodities by licensed digital asset exchanges, brokers, and dealers. This regulatory development is aimed at facilitating Thailand’s green economy and net-zero goals while diversifying the products available in the regulated digital assets market. The environmental commodities currently being traded on certain market platforms and via over-the-counter channels include: Carbon credits: Tradable certificates representing a reduction of CO₂ emitted into the atmosphere. Renewable energy certificates (RECs): Tradable proof of electricity generated from renewable energy sources. Carbon allowances: Tradable permits to emit a capped amount of greenhouse gases. The tokenization of these instruments is essentially the process of converting them into digital tokens, making it possible to list them on blockchain exchanges for trading purposes. Background Tokenized carbon credits, RECs, and carbon allowances fall under the category of utility tokens for consumption purposes or tokens representing entitlement certificates—that is, group 1 utility tokens, which are not considered financial products. The offering, trading, and provision of secondary-market services of this type of token are exempted from licensing requirements for regulated digital asset businesses under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018). Under the previous regulatory framework, licensed digital asset business operators were not allowed to provide services involving such unregulated tokens, as it was deemed to be engaging in “other businesses,” which digital asset operators generally cannot engage in without prior SEC approval. Regulatory Amendment Under the amended digital asset regulations, licensed digital asset exchanges, brokers, and dealers may now apply for SEC approval to offer services related to these tokenized assets as “other businesses,” including listing them for trading on digital asset exchanges. Apart from requiring operators to comply with the general conditions
September 4, 2025
With advancements in health technology, telemedicine has taken on a wider online presence in Thailand. Under the Medical Facility Act, licensed clinics and hospitals may now diagnose, prescribe, and issue electronic prescriptions during a video call, provided they maintain patient confidentiality and proper recordkeeping. As a complementary concept, a telepharmacy allows a pharmacist to verify prescriptions, counsel patients, and dispense medication from a remote site. Hospitals, clinic chains, and some retail pharmacy groups have adopted “drive-thru” or “locker” pick-up points where drugs are bagged only after a real-time video consultation with a registered pharmacist. The clear benefits of telehealth include shorter waiting times and broader access to specialists, which is in the public interest. Drug Distribution and Advertising in Thailand The online pharmacy ecosystem creates a legal bridge in that once a teleconsulting doctor issues an e-prescription, a licensed pharmacy can lawfully dispense and deliver the medicine prescribed to the patient’s door. Nonetheless, the critical compliance component remains the advertising of medicinal drugs. It is still not allowed to advertise prescription/pharmacy-dispensed drugs to the public in Thailand. Although Thailand’s Drug Act of 1967 was written more than half a century ago, it still governs the trading of every medicinal drug that makes its way to consumers in Thailand—whether bought at a pharmacy or delivered with a few taps on a smartphone. First and foremost, the pharmacy must hold a license to sell medicinal drugs as a retailer. It is also mandatory that arrangements be made for a pharmacist to be on duty during opening hours. Drugs are classified into three main categories: prescription drugs, pharmacy-dispensed drugs, and over-the-counter (OTC) drugs. The listing of OTC drugs with their prices via an online platform is allowed, as only OTC drugs may be advertised directly to the public. However, naming or showing