You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

June 26, 2023

Vietnam Signals Intent to Loosen Control Over OTT Telecom and Cloud Services

Vietnam’s Ministry of Information and Communications (MIC) organized a workshop with industry representatives on June 19, 2023, to discuss its future policy direction for over-the-top (OTT) telecom services and internet data center (IDC) and cloud computing services. OTT telecom services, in the MIC’s interpretation, are communication services such as text messages or voice calls provided over the internet—for example, the services of Zalo, WhatsApp, WeChat, etc.

The workshop, the first in an expected series, focused only on the discussion of policy on how to regulate these services.

Light-Touch Management Approach

A very positive signal of the MIC in the workshop was its clear intention to apply a “light-touch” approach to management. For cross-border provision of OTT telecom services and IDC/cloud computing services, the MIC intends to require notification and a post-check mechanism, instead of a heavy licensing or commercial arrangement regime like the one applicable to traditional telecom services. In addition, there is no limitation on foreign investment if foreigners would like to provide these services in Vietnam.

With regard to domestic service providers, the MIC proposes a registration regime with a similar post-check mechanism. The MIC’s reason for registration instead of notification is because the provision of these services by domestic companies may involve setting up data center/cloud systems which require consideration of various issues including location, electricity sources, and connection with telecom infrastructure such as marine cable. However, the MIC is also hoping to make the registration process as light as possible for enterprises (for example, using online registration) to provide a favorable environment and conditions to facilitate development of the industry without obstacles or cumbersome administrative procedures for companies’ operations.

For providers of these services, the MIC is also considering an exemption from the responsibility to pay fees for telecommunications activities rights, and from payment to the Telecom Universal Service Fund, which traditional telecom companies are subject to. However, the provision of these services still needs to comply with relevant regulations on consumer protection, data protection, cybersecurity, network information security, national security, and service quality.

The MIC is contemplating the requirement of a service quality announcement. If the OTT telecom or IDC/cloud computing service providers can assure the quality of their services, they should let users know. If they cannot assure the quality of their service—for example, if they have no commercial arrangement with telecom service providers for the provision of their services or their service quality depends entirely on the service quality of the telecom carriers—this also needs to be publicly announced.

Regulated Under the Telecom Law?

Whether these OTT telecom services and IDC/cloud computing services should be regulated under the Telecom Law was a key issue discussed in the workshop. The MIC explained that the WTO defines value-added telecom services as services for storing and retrieving information through telecom networks, and Vietnam’s schedule of commitments on telecom services in the WTO also mentions information storage and information retrieval services. As IDC/cloud computing services involve storing and retrieving information through telecom networks, they should be considered telecom services. Countries such as China, Thailand, Korea have set a precedent by regulating IDC/cloud computing services as telecom services under their telecom laws. Currently, there are no regulations on conditions for market access and business conditions for providing these types of services, while Vietnam’s Investment Law clearly stipulates that data center services are conditional services. Thus, there is a need to regulate these services under the Telecom Law to overcome legal gaps and create facilitation and transparency for enterprises investing in and providing these services.

With regard to OTT communication services, 27 countries of the EU, China, and Korea are considering these services as telecom services and regulating them under their telecom laws. These OTT services are used more and more frequently and potentially will replace traditional telecom services, while the existing Telecom Law does not regulate these services, leading to the rights of users and information security not being ensured. Therefore, according to the MIC, it is appropriate to regulate these OTT services under the Telecom Law. However, according to the MIC, the Telecom Law will only provide a framework and will leave all the details to be regulated by a decree.

It is worth noting that the MIC only intends to regulate the provision of OTT telecom services when such services are the primary business of a company. When communication functions are merely add-ons and the company’s main business is not telecom services—for example, the chat/call functions of transportation services like Grab or social networks like YouTube—the MIC will consider exempting these add-on services from the scope of application of OTT telecom services.

While the industry representatives in the meeting were highly appreciative of the MIC’s approach and its openness and willingness to work closely with businesses and take their input into account, they expressed a strong sentiment for not including these services under the Draft Telecom Law. Rather, if these services need to be regulated, they should be regulated in a separate legal document.

The industry argument was that with the convergence of technology and the integration of many sectors and services, the differences between value-added telecom services and IT services have become very blurred and many countries have started deviating from this distinction. Data center/cloud computing services are more of the nature of IT services instead of telecom services. Also, OTT communication services do not use telecom resources such as frequency or numbering, they do not own telecom infrastructure to provide services, and they do not require interconnection to the public telecom network; they are essentially just applications and, like any application, they use the internet for service provision. Therefore, they should not be considered telecom services.

If the MIC still considers them telecom services and wishes to regulate them under the Telecom Law, the industry representatives strongly recommended that there should be separate chapters of the law and separate rules for these services, and the language of the law must clearly exempt these services from general rules governing traditional telecom services. In addition, the wording of the regulations should be straightforward and easy to understand, to avoid ambiguity and confusion in interpretation and implementation.

The MIC reassured the industry of their light-touch management approach and said this was just a matter of drafting techniques in putting those provisions under the Draft Telecom Law, and the MIC will involve the industry closely in the drafting process to ensure there is no confusion as to the policy intention in regulating these services.

 Moving Forward

The MIC appeared very open and willing to take input from the industry. It will continue holding workshops and dialogues and closely engage the industry in the drafting process, so that the Draft Telecom Law (amendment) which will be submitted to the National Assembly for a second reading and approval in November 2023 will achieve the purposes of creating transparency and facilitating an environment for business development and technology innovation.

It is therefore strongly recommended that businesses, associations, and experts should pay attention to the drafting process of this Draft Telecom Law and actively contribute opinions to the MIC.

RELATED INSIGHTS​ 

January 22, 2026
On January 20, 2026, Vietnam’s Ministry of Finance (MOF) issued Decision No. 96/QD-BTC to formally launch pilot administrative procedures for licensing crypto asset trading market services in Vietnam. The decision took immediate effect and implements the government’s pilot crypto asset market program under Resolution No. 05/2025/NQ-CP. Notably, competent authorities have now begun accepting license applications, marking the first time Vietnam has operationalized a licensing pathway for crypto trading market operators. Administrative Procedures and Applications The decision stipulates procedures for (i) granting, (ii) adjusting, and (iii) revoking licenses to provide services for organizing crypto asset trading markets. It provides detailed, step-by-step guidance for each procedure, including dossier composition, internal review stages, coordination mechanisms, and statutory timelines. These procedures apply specifically to entities seeking to organize and operate crypto asset trading markets within Vietnam’s pilot regulatory framework. The MOF is the authority responsible for reviewing and deciding on the above procedures, with the State Securities Commission acting as the receiving, coordinating, and procedural focal point. For licensing applications, the MOF will coordinate with multiple authorities, including the State Bank of Vietnam and the Ministry of Public Security, particularly in relation to anti-money laundering, cybersecurity, system safety, and risk control requirements. Applications may be submitted in person, by post, or electronically via the National Public Service Portal or the administrative procedure information system, in line with applicable regulations. Statutory processing timelines vary depending on the specific procedure and stage involved. For applications to obtain a license to organize a crypto asset trading market, the process is conducted in multiple phases: The MOF will issue an initial written response within 20 working days from receipt of a complete and valid initial dossier, following which, upon submission of the full set of required documents, the MOF will complete substantive review and issue the license
January 21, 2026
On January 16, 2026, Thailand’s Electronic Transactions Committee released for public comment a draft notification that would require social media platforms operating in Thailand to implement identity verification for all user accounts and advertisers, with enhanced scrutiny for high-risk advertising activities. If finalized in its current form, the Notification on Measures to Prevent Technology Crime for Social Media Service Providers would take effect 180 days after publication in the Government Gazette, fundamentally changing how platforms verify users and monetize advertising services. The public comment period is open through February 2, 2026. Mandatory User and Advertiser Identity Verification The draft establishes a universal requirement that all social media service providers implement identity verification measures for every user account. The draft imposes stricter verification obligations for advertisers than for general users. Before publishing any advertisement, platforms must verify the advertiser’s identity at a level sufficient to identify the advertiser, unless the advertiser has previously completed verification. Risk-Based Advertisement Verification The identification requirements for advertisers will be more stringent in the following cases: The advertiser has a history of user complaints or has previously violated the platform’s terms of service. The advertisement involves finance, investment, loans, sensitive personal data, or content flagged as potentially involving cybercrime. The advertisement specifically targets vulnerable groups, such as the elderly or other at-risk demographics. In such cases, platforms must conduct identity verification using government-issued identification documents and must confirm the accuracy, authenticity, and currency of these documents with the issuing government agencies. Alternatively, platforms may verify identity through an eligible digital identity verification and authentication system provider. Information Retention Platforms must retain specific information for each advertiser, including the name of the individual or juristic person and any representatives, government-issued identification documents such as ID cards, passports, or certificates of incorporation, and reachable contact information including
January 21, 2026
Spurred by global geopolitics and Canada’s Indo-Pacific Strategy, which aims to forge deeper ties with ASEAN, Canadian companies have been showing growing interest in Thailand and Southeast Asia in recent years. To understand the opportunities offered by the region, we sat down with Andrew Stoutley, a Toronto native and the chief operating officer of Tilleke & Gibbins, a leading Southeast Asian regional law firm with over 130 years of history in Thailand. Q: Why are Canadian companies looking at Thailand and Southeast Asia right now? A: Two reasons stand out. First, diversification has moved up the agenda. Many Canadian companies want options outside North America due to tariff volatility and policy uncertainty in the United States, as well as questions around the next Canada–United States–Mexico Agreement mandatory joint review. At the same time, the shift of global production from China to Southeast Asia is accelerating, driven by rising costs, geopolitics, and the need to avoid overreliance on a single market. As a result, Canadian companies are looking for a second production base or a regional hub, and Thailand and its neighbors are natural choices given their manufacturing depth, location, and established supply chains. Second, Canada’s own efforts in the region are gaining traction. The Indo-Pacific Strategy has led to more on-the-ground support, including larger trade missions, upgraded diplomatic posts, and new financing options. Export Development Canada (EDC) now has a presence in Bangkok, giving Canadian companies a direct line to financing and insurance in Thailand. There’s also steady progress on trade frameworks like the recently signed Canada–Indonesia Comprehensive Economic Partnership Agreement (which will come into effect pending domestic procedures), ongoing negotiations of a Canada–ASEAN FTA, and the exciting announcement about the launch of negotiations of a Canada–Thailand FTA. Together, these developments have the potential to make it much easier
January 13, 2026
On January 9, 2026, Thailand’s Securities and Exchange Commission (SEC) filed a criminal complaint with the Economic Crime Suppression Division (ECD) against five individuals for unauthorized operation of a digital-asset dealer business under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018). This precedent-setting case signals that the regulator is willing to pursue crypto enforcement against natural persons even in the absence of a licensed platform entity. Background and Implications The case follows the SEC’s October 2025 public warning about the use of iris-scanning technology in exchange for certain digital tokens. In its warning, the SEC cautioned that exchanging or trading these specific tokens with unlicensed service providers exposes users to heightened fraud, scam, and money laundering risks. Unlike prior regulatory enforcement matters, which involved platform-level administrative fines for operational or compliance failures, this case targets misconduct by individuals who may not be professional traders but openly advertised their willingness to buy these tokens from the public, opened individual over-the-counter (OTC) trade channels for these tokens, and facilitated off-exchange transactions in a manner resembling ordinary commercial dealing. This enforcement action establishes a clear precedent that natural persons engaging in public-facing digital-asset dealing may face criminal liability under Thai law, even without operating through a corporate or licensed platform structure. Outlook The alleged offenders may not settle this crime by payment of fines. Following the SEC’s referral, the ECD will undertake further investigation, after which prosecutors may review the case and proceed to court. The SEC has stated that it will cooperate fully with enforcement agencies throughout the criminal enforcement process.