You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 17, 2020

Vietnam’s 2019 ICT Legislation Year in Review

Vietnam’s Ministry of Information and Communications (MIC) viewed 2019 as a year for improving the country’s ranking in the ICT sector, with the motto of “Modeling, Discipline, Focus, and Breakthrough.” In 2019, among other goals, the MIC focused on shifting telecom infrastructure to ICT infrastructure to promote digital transformation; shifting the telecom industry from voice to data by reducing voice interconnection fees; universalizing smartphones; planning for 5G frequency; testing mobile money; and dealing with spam email and messages. As a result, Vietnam’s ICT sector saw some remarkable policy development within the year, as summarized below.

1. Telecom

Rollout of 5G Network

On September 27, 2019, the Politburo issued Resolution 52-NQ/TW on the orientation and proactive policies for Vietnam’s participation in Industrial Revolution 4.0, which sets a target of having nationwide 5G network coverage in place by 2030 and giving all citizens access to broadband internet with low cost. According to the MIC, 5G technology would bring a new economy, helping the country create a series of new products for smart cities.

The government issued the first license to test 5G to Viettel, which began testing 5G in Hanoi and Ho Chi Minh City in May 2019. Tests are expected to be completed in January 2020. MobiFone has received a license to become the second operator to conduct 5G network testing, and MobiFone and Vinaphone are expected to launch their own 5G networks in 2021.

Vietnam is expected to commercially launch 5G in 2020, which would make it one of the leading countries in the ASEAN region in 5G commercial deployment. The MIC also has submitted to the Prime Minister (PM) a plan to stop the old 2G mobile technology by 2022. Currently, there are three existing land mobile technologies: 2G deployed since 1990, 3G deployed since 2009, and 4G deployed since 2016.

Amendment of Decree 25/2011/ND-CP on Telecommunications

The MIC submitted a draft decree to amend Decree 25/2011/ND-CP on Telecommunications to the government in 2019. This draft decree deals with some key issues of competition management, provision and retention of subscriber information, revocation of telecom business licenses, and revocation of telecom numbering. However, the MIC is now reconsidering certain issues in the draft decree and expects to submit the clarification and explanation to the government in 2020, according to an unofficial source.

2. Internet

Management and Use of Internet Resources

The Minister of the MIC issued Circular 06/2019/TT-BTTTT on July 19, 2019, to amend Circular 24/2015/TT-BTTT on the Management and Use of Internet Resources. Circular 06 aims at administrative reform and dealing with issues such as changing the name of internet resource users in case of merger or reorganization; handling violations in domain name registration, such as providing inaccurate information or forging and impersonating identities; and revocation of domain names.

3. Cybersecurity

Law on Cybersecurity and Draft Decree on Implementation

Vietnam’s new Cybersecurity Law came into effect on 1 January 2019, with a majority of its provisions enforceable as from the effective date of the law. However, there are still certain provisions of the law which need to be further guided by implementing regulations and guidelines, including the important and controversial Article 26 on data localization. A draft decree with further guidance on data localization is now being considered by the government but there has been no official news as to when the decree will be issued. According to an unofficial source, it may be issued in the first quarter of 2020.

The draft decree has narrowed down the broad language of Article 26.3, setting out that storing data and/or having branches or representative offices in Vietnam is required for foreign service providers only for the protection of national security, social order and safety, social ethics, and community health, and when the three following criteria are fulfilled: (i) such enterprise provides regulated services; (ii) such enterprise carries out activities of collecting, exploiting [using], analyzing and processing the regulated types of data; and (iii) such enterprise has been warned that the services it provides are used to commit a breach of the laws of Vietnam and it does not take any measures for avoiding, dealing with, fighting against or preventing such breach, or resisted, obstructed, or ignored requests from the relevant authorities.

List of Potentially Unsafe Products and Goods Under the Management of the MIC

The MIC issued Circular 05/2019/TT-BTTTT on the List of Potentially Unsafe Products and Goods Under the Management of the MIC. Accordingly, some key goods required to be declared for conformity to technical regulations include desktop and laptop computers; tablets; set-top boxes; amplification equipment in cable TV systems; and cordless telephone equipment (except for DECT equipment). The quality of these goods will be managed based on certification of conformity to technical regulations, declaration of conformity to technical regulations, and quality inspection.

Increased Network Safety and Security to Improve Vietnam’s Ranking

On June 7, 2019, the Prime Minister issued Directive 14/CT-TTg on Increasing Network Safety and Security to Improve Vietnam’s Ranking. In 2018 and early 2019, there were a number of intentional cyber attacks and thefts of state secrets which caused serious consequences. This had an effect on Vietnam’s ranking in the Global Cybersecurity Index of the International Telecommunication Union. According to the unofficial ranking in March 2019 for the period of 2017-2018, Vietnam ranked 50th out of 194 in the assessed countries and territories, and 5th out of 11 in Southeast Asia.

In the recent directive, the PM required agencies, organizations and state enterprises to implement comprehensive solutions to ensure network safety and security in order to contribute to improvement of Vietnam’s ranking in the Global Cybersecurity Index. The PM also prioritized the use of domestic products, solutions and services for important information systems.

Establishment of Alliance for Handling Malicious Code and Preventing Network Attacks

The signing ceremony and announcement of the establishment of the Alliance for Handling Malicious Code and Preventing Cyber Attacks took place on April 17, 2019, in Hanoi in the context of Vietnam Security Summit 2019. The Alliance operates under the guidance of the MIC and Vietnam Information Security Association. The five founding members of the Alliance are Viettel Network Security Company, VNPT Information Security Center, FPT Network Security Center, BKAV Joint Stock Company and CMC Information Safety and Security Ltd.

4. Data Privacy

Draft Decree on Combating Spam Messages, Email, and Calls and Regulations on Advertising via Text Messages, Email, and Phone Calls

The MIC was determined to implement multiple solutions to resolve the problem of pre-activated SIM and spam messages. By the end of 2019, it was reported that the number of spam messages was dramatically reduced by over 90%.

The MIC drafted a decree on anti-spamming to replace Decree 90/2008/ND-CP (as amended by Decree 77/2012/ND-CP). The draft Decree on Combating Spam Messages, Email, and Calls and Regulations on Advertising via Text Messages, Email, and Phone Calls was released for public consultation from August 6 to October 6, 2019, and was submitted to the government in December 2019.

According to the draft decree, the MIC will build and operate a system where users can easily report and forward spam and advertising messages. The draft also provides a mechanism for users to be placed on a “Do Not Text or Call” list to avoid all advertising text messages and advertising calls. The MIC will also build an IP blacklist with regard to IP addresses which distribute spam email from commercial and non-commercial sources.

The principles for advertising via text messages, email and telephone calls include: senders must stop sending to recipients immediately after receipt of the recipient’s refusal; advertising can only be send from electronic addresses and systems as prescribed by the MIC; advertisers may not send/make more than three advertising messages, three advertising emails, and one advertising call to an electronic address within 24 hours, unless otherwise agreed with the recipient; and advertising text messages and phone calls can only be sent/made between 7 a.m. and 10 p.m. unless otherwise agreed with the recipient. Advertising content must conform to the Law on Advertising.

5. Television

Draft Decree to Amend Decree 06 on Broadcasting and TV Services

The MIC released a draft decree to amend Decree 06/2016/ND-CP on the Management, Provision, and Utilization of Broadcasting and TV Services in July 2018, and later a new draft version (version 4) in December 2018 in an attempt to regulate content on demand and video on demand, also known as OTT (over-the-top) TV services. The draft decree regulates some key content, including licensing of paid OTT TV Services; expanding the list of foreign content which must be translated to include TV shows (reality TV, game shows), and the translation and editing must be done by a licensed press agency; not allowing pre-installed advertisement from overseas and requiring licensed press agencies to be responsible for the installation of any advertisement in Vietnam; requiring the proportion of domestic programs with regard to on-demand internet TV services to be not less than 30% of the total programs. These main issues have been attracting many concerns from international companies and organizations. According to an unofficial source, after back and forth between the government and the MIC, the draft is now back to the MIC for further consideration.

6. E-commerce

Mobile Money

Mobile money is understood as the use of a mobile device to transfer money, pay bills, buy or sell goods in a digital environment, without needing a bank account to make the transactions. The MIC is encouraging the development of mobile money to spur economic growth and reduce social costs of transactions. According to the MIC, based on current statistics, more than 50% of the Vietnamese population does not have a bank account, thus, mobile money helps provide non-bank customers a non-cash payment channel and instrument, thereby contributing to the government’s policy to increase the rate of non-cash payments.

The State Bank of Vietnam (SBV) has developed and submitted to the PM for approval a pilot project to allow telecom network and service providers to test the use of mobile money. In the draft of the pilot project, the SBV proposes a limit of 10 million VND per month for a mobile money account, then this limit will be adjusted accordingly as the market develops.

An important point of mobile money service is to allow telecom subscribers to use mobile money service without having a bank account. Subscribers can top up mobile money accounts at banks or at agents of telecom enterprises. The SBV will only manage the total accounts of telecom enterprises to avoid payment risks. According to the SBV, it will first issue licenses to telecom enterprises which already have a license to provide intermediary payment services (e-wallets). Currently, Viettel and VNPT have these licenses, and MobiFone is applying for one. After the PM approves licensing for trials of mobile money services, telecom enterprises will have to develop their own pilot schemes to provide services in order to submit to the SBV for licensing.

7. Information Technology

“Make in Vietnam”

The “Make in Vietnam” campaign—emphasizing creativity, design, mastery of technology, and active production in Vietnam—was announced at the National Forum on Vietnam Technology Enterprise Development organized in May 2019.

According to the PM, technology is the key factor for economic development, enabling Vietnam to escape from the middle-income trap and helping Vietnam to become a developed industrial country. To achieve the goal of making Vietnam a prosperous industrial country by 2045, Vietnam needs to take full advantage of the achievements of Industrial Revolution 4.0 with the development of science, technology, and technology businesses. Instead of just buying and mastering technology, Vietnam needs to invent technology by itself. Instead of just assembling and processing, Vietnam needs to move to a new direction of producing Vietnamese products, using technology to solve Vietnam’s problems.

The MIC also developed and submitted to the PM for approval a directive on the development of Vietnamese digital technology enterprises. In addition, to facilitate the development of the IT industry, the MIC submitted to the PM a report on the establishment of centralized IT zones, including Da Nang Software Park No. 2, Da Nang IT Park, and Centralized IT Park in Can Tho City.

Smart Cities

The MIC issued the ICT Reference Framework for Smart Cities (version 1.0) in Decision 829/QD-BTTTT dated May 31, 2019. The purpose of developing this reference framework is to set out the basis for building and developing smart cities in Vietnam in compliance with the principles of smart city development. Some key general principles for developing smart cities include: focusing on serving citizens; ensuring the capacity of information infrastructure to meet the needs of developing smart cities apps and services; promoting shared information infrastructure; encouraging open data; ensuring technology neutrality, focusing on the application of Internet of Things, cloud computing, big data analysis, artificial intelligence and other technology compatible with multiple platforms; optimizing the existing ICT infrastructure; ensuring information safety and security, and the capacity of emergency response to security incidents related to information and critical information infrastructure; and protection of data privacy.

In addition, the MIC announced Vietnam’s Smart City Index for the period up to 2025 (Version 1.0) on 13 September 13, 2019. This index is used to evaluate the degree of “smartization” of smart cities’ activities in accordance with the orientation and goals of developing sustainable smart cities for the period of 2018-2025, with an orientation to 2030. Furthermore, the MIC also issued documents guiding provinces and cities to implement pilot smart city services in order to avoid scattered and wasteful investment.

Importation and Repair of Used IT Goods

The PM issued Decision 31/2019/QD-TTg dated October 9, 2019, on Importation of Used IT Goods Under Import Prohibition for the Purposes of Scientific Research and Processing and Repair of Used IT Goods Under Import Prohibition for Foreign Partners to Sell Abroad. This decision prescribes the dossiers, order, procedures and competence to permit the importation of goods on the list of used IT products banned from import for the two above-mentioned purposes.

The general criteria and conditions for importation include that the used IT goods are imported only for scientific research or processing and repairing activities and not for selling or giving, and the goods must not cause environmental pollution in accordance with the law on environmental protection. Traders importing used IT goods for scientific research must re-export or destroy the goods in accordance with law within three months from the completion of the scientific research. Traders importing used IT goods for processing and repairing activities must re-export all products to foreign countries after processing and repairing the goods, and are not allowed to sell those products in Vietnam.

Draft Plan on National Digital Transformation to 2025, with an Orientation to 2030

With the goal of Vietnam becoming a digital, stable and prosperous country, the process of national digital transformation is proposed to be carried out in three phases. Phase 1 (2020-2022) is the digitization of industries, and digital transformation of the economy, society, and state agencies to increase productivity and create new sources of growth; Phase 2 (2023-2025) is enhancing the competitiveness of the economy by digital transformation; and Phase 3 (2026-2030) is the development of a comprehensive digital economy and society.

RELATED INSIGHTS​ 

September 7, 2026
On September 4, 2026, Thailand’s prime minister convened the first meeting of the Data Center Business Policy Committee. The committee endorsed a draft policy framework for the data center industry and tasked four subcommittees with developing the standards that would sit beneath it, shifting away from fragmented, agency-by-agency approvals toward a unified national strategy aiming to maximize economic value while managing environmental and infrastructure concerns. Proposed Scope and Pillars of the National Data Center Policy Framework The proposed framework would cover all types of data centers, including internal or captive facilities operated within a company or its affiliates, rather than only commercial third-party providers. If adopted in this form, companies running private data centers purely for internal purposes would also become subject to regulatory oversight. Minimum safety and operational standards would be established, with uniform enforcement across all categories. The committee endorsed a draft policy framework with four key pillars: Industrial classification: Data centers exceeding 2 MW would be classified as industrial operations, which may require factory licenses and environmental impact assessments under the Factory Act. Resource pricing: Utility rates would be structured to reflect both direct and indirect costs, supporting green energy and green data center standards. Centralized screening: A centralized review would evaluate project suitability and resource allocation. Operators may be required to submit proposals through periodic “pitching” rounds, where projects are competitively assessed on their potential economic and strategic benefits to Thailand. Digital ecosystem: The framework would prioritize data sovereignty, tax incentives, and conditions promoting domestic digital businesses, AI, and cloud infrastructure. Multidimensional Evaluation Criteria and Subcommittees Four subcommittees will be established to develop standards responsible for the following dimensions: Economic: Criteria for assessing the economic viability of data center projects, for use in prioritizing data centers based on infrastructure readiness, demand type (including AI factories),
September 4, 2026
Foreign business restrictions on telecommunications, treasury center businesses, and intragroup support services were eased when Thailand published the Ministerial Regulation Prescribing Service Businesses Not Requiring Permission for Foreign Business Operations (No. 5) B.E. 2569 (2026) in the Government Gazette on August 28, 2026. The ministerial regulation expands the categories of service businesses that foreign investors may operate without a foreign business license (FBL) under the Foreign Business Act B.E. 2542 (1999) (FBA). Of particular relevance to the telecommunications, fintech, and technology sectors, the ministerial regulation exempts: Type 1 telecommunications licensees, which do not have their own networks; Treasury center businesses operated in accordance with Thailand’s exchange control regulations; and Certain intragroup administrative, human resources, and information technology management services. Telecommunications Services Foreign-owned businesses providing telecommunications services under a type 1 telecommunications license may now operate without obtaining an FBL. This may streamline market entry for qualifying telecommunications and digital infrastructure businesses. The exemption applies only to the FBA licensing requirement. Operators must continue to comply with applicable requirements under the Telecommunications Business Act and the regulations of the National Broadcasting and Telecommunications Commission, and the change does not affect foreign ownership restrictions applicable to type 2 or type 3 telecommunications businesses. Treasury Center Businesses The ministerial regulation also exempts qualifying treasury center businesses from the FBL requirement. This may facilitate centralized treasury functions in Thailand, including liquidity management, foreign exchange management, and intragroup funding arrangements. Treasury center operations remain subject to applicable requirements of the Bank of Thailand and other competent authorities. Intragroup Administrative, HR, and IT Services Certain administrative, human resources, and information technology management services provided between affiliated entities are also exempt, provided the relevant entities satisfy prescribed ownership or management criteria. The exemption is available where the service provider and recipient are related through specified ownership
September 2, 2026
Thailand and China have a longstanding and significant trade relationship, which increasingly extends to e-commerce and digitally enabled supply chains. While these channels create new opportunities for businesses to reach consumers across borders, their growth also brings greater exposure to intellectual property (IP) infringement across jurisdictions and online platforms. Effective cooperation between the two countries’ enforcement authorities has therefore become increasingly important. To strengthen cooperation in this area, Thailand and China signed a memorandum of understanding (MOU) on IP enforcement in Beijing on July 20, 2026, during the Thai prime minister’s official visit to China. Officially titled “Memorandum of Understanding Between the State Administration for Market Regulation of the People’s Republic of China and the Ministry of Commerce of the Kingdom of Thailand on Cooperation in the Field of Intellectual Property Enforcement,” the MOU forms part of a broader bilateral agenda covering industrial and supply chains, participation by micro, small, and medium-sized enterprises (MSMEs), cooperation associated with the ASEAN–China Free Trade Area 3.0, and progress on the registration of Thai geographical indications in China. The MOU establishes a bilateral framework for cooperation and coordination in five broad areas: Strengthening dialogue in IP enforcement; Enhancing information sharing; Facilitating the enforcement of IP rights in cases arising in the parties’ domestic markets and on online platforms, in accordance with their respective domestic laws; Promoting cooperation in IP enforcement training and human resource development; and Undertaking other cooperation activities agreed upon by both sides. The Department of Intellectual Property (DIP) will serve as the principal coordinating agency for Thailand, while the Bureau of Law Enforcement and Inspection in China’s State Administration for Market Regulation (SAMR) will serve in that role for China. The framework is particularly relevant to the growth of e-commerce, as it covers infringement in the domestic markets and on
August 25, 2026
Vietnam has enacted a new decree establishing administrative penalties for violations in the fields of cybersecurity and personal data protection. Decree No. 330/2026/NĐ-CP (Decree 330), issued and effective from August 19, 2026, provides a detailed sanctions framework for noncompliance with the Law on Personal Data Protection (including its implementing regulations under Decree 356/2025/ND-CP) and the Law on Cybersecurity, together with their guiding decrees. The issuance of Decree 330 signals that the practical grace period previously perceived by many businesses may be drawing to a close, with active regulatory enforcement in these areas expected to commence in earnest. Scope and Key Provisions Decree 330 has extraterritorial effect and applies to both onshore and offshore companies. For offshore companies, it applies to those that (1) provide telecommunications, internet, online-content, information-technology, cybersecurity, or cross-border services and (2) are involved in or related to the processing of personal data of Vietnamese citizens and certain other people of Vietnamese origin. Decree 330’s key provisions cover the following areas: Administrative penalties for violations relating to the protection of national security and public order in cyberspace, including the dissemination of unlawful, false, or unverified information. Sanctions for cyberattacks, unauthorized access, introduction of harmful code or programs, and failure to cooperate with specialized cybersecurity forces. Sanctions for personal data protection violations, such as consent, cross-border data transfers, impact assessments, breach notification, and data-subject rights, among others—with maximum fines of up to 5% of an organization’s preceding-year revenue for cross-border transfer violations, or up to VND 3 billion for other data-protection breaches. Personal Data Protection Penalties The key sanctions for personal data protection violations are as follows: Consent violations: Fines of up to VND 70 million (approx. USD 2,642), plus potential additional sanctions and remedial measures including irreversible deletion of personal data collected without consent and confiscation of