You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 10, 2023

Vietnam Issues Guidance on Law on Cinema

Subscribe to Updates

The National Assembly of Vietnam promulgated a new Law on Cinema in June 2022 with an effective date of January 1, 2023. To guide the implementation of the new law and the sanctioning of administrative violations thereof, the government of Vietnam issued two related decrees in the final days of 2022.

Cinema Decree

On December 31, 2022, the government issued Decree No. 131/2022/ND-CP elaborating a number of articles of the Cinema Law (“Cinema Decree”), which took effect with the new law on January 1, 2023.

Among the many issues under the Cinema Law guided by the Cinema Decree, one that is critical to over-the-top (OTT) media service providers is the set of conditions for performing the mandatory self-rating of films to be disseminated in cyberspace. According to the Cinema Law, meeting the film self-rating conditions is one of the prerequisites for online dissemination of films. If a film disseminator does not meet these conditions, it would be required to request the Ministry of Culture, Sports and Tourism (MOCST) to perform the rating.

The conditions for online disseminators to self-rate their films have now been set out under Article 12 of the Cinema Decree. Accordingly, these conditions include:

  • Having a film rating council or technical software or a mechanism to rate the films according to Vietnamese regulations on film rating and taking responsibility for the results of film rating.
  • Having a plan to amend and update film rating results at the request of the cinematography authority (for most providers, this is the Cinematography Department under the MOCST).
  • Having an administrative tool to support the rating of films according to each of the rating criteria and to flexibly display the updated rating immediately after the rating is changed.
  • Having a technical plan and process for suspending and removing films at the request of the cinematography authority. Upon a request for removal of the film, the disseminator must proceed to implement the removal functionality available on the administrative tool.

These officially enacted conditions are much more relaxed compared to those proposed in the first draft of the Cinema Decree (released for public consultation in October 2022), which required that a foreign film disseminator (e.g., an OTT service provider), among other conditions, must establish a local enterprise in Vietnam or enter into a business cooperation agreement with a local company to be eligible to perform the self-rating of films. This proposed requirement under the draft Cinema Decree was subject to heated discussions among relevant stakeholders at the time. The government seems to have taken industry opinions into consideration and decided to change the burdensome conditions.

The Cinema Decree also provides the formality requirements for an online film disseminator to request recognition from the MOCST that they meet the self-rating conditions, as well as the procedures for the MOCST to receive and handle the dossier (in Article 12.2 and 12.3).

In addition, the Cinema Decree gives details on the following critical obligations of online film disseminators:

  • To notify the MOCST of the list of films to be disseminated and the self-rating results of the films before disseminating films in cyberspace (Article 13).
  • To implement necessary technical measures for parental control, for display of warnings on inappropriate and age-restricted content, and for receiving and handling platform users’ complaints and reports on violations in relation to content, technical measures, or other violations of law (Article 14).
  • To provide contact points and contact information for receiving and handling requests from the cinematography authority (Article 15.1).
  • To stop disseminating and to remove violating films within 24 hours and other illegal content within 3 to 5 days upon the cinematography authority’s request (Article 15.2).

Cinema Sanction Decree

On December 30, 2022, the government issued Decree No. 128/2022/ND-CP amending Decree 38/2021/ND-CP on penalties for administrative violations in the field of culture and advertising (as previously amended by Decree 129/2021/ND-CP), focusing on the addition of sanctions for new violations in the field of cinematography (“Cinema Sanction Decree”). The Cinema Sanction Decree takes effect on February 15, 2023.

Some of the notable sanctions stipulated by the Cinema Sanction Decree include:

  • A monetary fine of VND 40–60 million (approx. USD 1,700–2,555) and forcible removal of the disseminated film for the act of online film dissemination without rating the film and displaying the rating results (Article 7.2b).
  • A monetary fine of VND 20–40 million (approx. USD 850–1,700) and forcible removal of disseminated films for the failure to notify the MOCST of the list of films to be disseminated and the results of film rating (Article 10.7a).
  • A monetary fine of VND 40–60 million (approx. USD 1,700–2,555) and forcible removal of disseminated films for the failure to provide contact points and contact information for receiving and handling requests from state authorities and feedback, complaints, and denunciations from service users according to the law (Article 10.7b).
  • A monetary fine of VND 60–80 million (approx. USD 2,555–3,400) and forcible removal of disseminated films for the failure to implement technical solutions and coordinate with competent state authorities in removing and preventing infringing films as prescribed by law (Article 10.7c).
  • A monetary fine of VND 80–100 million (approx. USD 3,400–4,260) and forcible removal of disseminated films for the failure to ensure the conditions for self-rating of films (Article 10.7d).
  • A monetary fine of VND 80–100 million (approx. USD 3,400–4,260) and forcible removal of disseminated films for the failure to implement necessary technical measures for parental control and for receiving and handling platform users’ complaints and reports (Article 10.7dd).
Related Professionals

Industries

Technology

Location

RELATED INSIGHTS​ 

March 15, 2024
Vietnam’s fintech industry is booming, and the rapid emergence of tech startups and non-bank institutions offering innovative financial services has been outpacing existing regulations. This regulatory gap not only creates uncertainty for both innovators and consumers, but also poses a number of imminent risks in areas such as consumer protection, data privacy, cybersecurity, and anti-money laundering, among others. The State Bank of Vietnam (SBV) is stepping up to tackle these challenges by accelerating the promulgation of a long-awaited Fintech Sandbox Decree with the issuance of an updated draft (“Draft Fintech Sandbox Decree”) on March 4, 2024. The Draft Fintech Sandbox Decree establishes a controlled environment where fintech companies and financial institutions can test solutions that do not fall squarely within the parameters of existing regulations. The pilot activities will be limited in scope, scale, and duration, with a number of precautionary measures in place. The SBV will supervise this “sandbox” closely, effectively mitigating risks and gathering valuable data to inform future regulations. Who Can Participate in the Sandbox? Traditional financial institutions (credit institutions): Banks and other institutions licensed to provide financial services can participate in the sandbox to test new offerings or refine existing ones. Independent fintech companies: Startups and established companies specializing in fintech solutions can leverage the sandbox to pilot innovative ideas before seeking wider market adoption. Other relevant organizations involved in the pilot: Depending on the specific solution being tested, other entities may also be involved in the sandbox. Geographical scope: Limited to Vietnamese territory; cross-border testing is not allowed. Focusing on Three Solution Categories Earlier versions of the Draft Fintech Sandbox Decree included categories like blockchain technology and other innovative business models, but these were removed in the latest version. To allow the SBV to assess the associated risks and work on the solutions more
Read More
March 12, 2024
Thailand’s Ministry of Finance has issued the Notification re: Criteria, Methods and Conditions for Applying for and Issuing Licenses to Operate Virtual Bank Business, which was published in the Government Gazette on March 4, 2024. This notification opens an opportunity for qualified experts in technology, digital services, and diverse data usage fields to apply for virtual bank licenses to provide financial services through new digital channels. The main goal is to serve the financial needs of target groups that may not have received sufficient or tailored financial services from the traditional banking system. Licensing Timeline Application submission period: 6 months (March 20–September 19, 2024). Announcement of successful applicants: Mid-2025 (approx. 9 months–1 year from the end of the submission period) After the announcement, successful licensees must demonstrate their readiness to commence virtual bank operations within 1 year (extendable for up to 1 additional year) via the following: Having paid-up registered capital of THB 5 billion and plans to increase the paid-up registered capital to at least THB 10 billion after the initial business period; Establishment or adjustment of a financial business group; Procurement of human resources, IT systems, and relevant risk management tools. Number of Licenses to be Issued No written or specified limit, subject to the discretion of the Bank of Thailand (BOT). Key Qualifications Applicants must have the following: Experience and resources to support virtual banking operations according to the business model and plan. Expertise and experience in conducting business that utilizes technology and provides services through digital channels. Experience demonstrating the ability to obtain, access, manage, and utilize data, including development of systems or data connections to facilitate user activities, allowing them to use their data to conduct transactions with other providers. Criteria In assessing applicants’ qualifications for a virtual bank license, the BOT will consider
Read More
February 27, 2024
Thailand’s National Cyber Security Committee (NCSC) released three notifications under the Cybersecurity Act on January 18, 2024, setting cybersecurity-related requirements for key organizations and assets. While one of these notifications already took effect, the two most notable will take effect on January 18, 2025 (i.e., one year from their publication in the Government Gazette). These two are the NCSC Notification Re: Standards for Defining the Security Category for Data or Information Systems B.E. 2566 (2023) (“Notification on Security Category”) and the NCSC Notification Re: Minimum Standards for Data and Information Systems B.E. 2566 (2023) (“Notification on Minimum Standards”). These notifications apply to: State agencies; Supervising or regulating organizations (i.e., state organizations, private organizations, or persons designated by law to regulate or supervise the affairs of state organizations or critical information infrastructure organizations); and Critical information infrastructure organizations (i.e., organizations related to or providing national security, significant public services, banking and finance, information technologies and telecommunications, transportation and logistics, energy and public utilities, and public health). Collectively these are defined as “Organizations” under the notifications. Notification on Security Category The Notification on Security Category sets forth risk-based security classifications—or “security categories”—for Organizations’ data or information systems. For security category assessment purposes, Organizations are required to perform a self-assessment of their data or information systems based on three key security objectives: confidentiality, integrity, and availability. Each of these objectives is further categorized into three risk levels (low, medium, and high), taking into account the assessment of potential impact in the following areas: Organizations’ financial value or reputation; Organizations’ number of service users; Organizations’ ability to perform their duties; State stability or public order. The risk levels for the three objectives are determined by considering whether there are “minimal,” “severe,” or “serious severe” effects, as described below: Confidentiality (not including data classified
Read More
February 2, 2024
The pervasive global issue of illicit personal data trading has extended its reach into Vietnam, where such sensitive information is being sold at minimal costs. A 2023 report from the Ministry of Public Security revealed that over two-thirds of the Vietnamese population has fallen victim to unlawful data collection and distribution. In the past two years, authorities have pressed charges on five criminal cases involving the buying and selling of billions of items of personal data, encompassing a wide range of sensitive information such as names, phone numbers, email addresses, and more. Notably, a person’s profile can be acquired for just USD 1, while profiles of millions of business customers can be obtained for a mere USD 100. Recognizing the severity of the problem, Vietnam has made serious efforts to combat illicit personal data trading by criminal means, encompassing both the legal framework and practical implementation.   Understanding the Criminal Legal Framework Vietnam’s 2015 Criminal Code, as amended in 2017, functions as a pivotal legal instrument delineating offenses and their corresponding punishments. Under Section 2 of Chapter XXI of the Criminal Code (“Offenses Against Regulations on Information Technology and Telecommunications Networks”), individuals engaging in the illicit trading of personal data, depending on the nature of the data (e.g., information about phone number, address, or—more dangerously—bank account) and the nature of the infringing acts, may be charged under different crimes. The sanctions can include monetary fines; non-custodial reform; imprisonment; and/or prohibition from holding certain positions, practicing certain professions, or doing certain jobs. For example, for the illicit trade of private information of an individual on a computer or telecommunications network, Article 288 of the Criminal Code specifies penalties including a monetary fine of up to VND 1 billion (equivalent to around USD 41,000); non-custodial reform of up to three years;
Read More