You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 17, 2020

Vietnam’s 2019 ICT Legislation Year in Review

Vietnam’s Ministry of Information and Communications (MIC) viewed 2019 as a year for improving the country’s ranking in the ICT sector, with the motto of “Modeling, Discipline, Focus, and Breakthrough.” In 2019, among other goals, the MIC focused on shifting telecom infrastructure to ICT infrastructure to promote digital transformation; shifting the telecom industry from voice to data by reducing voice interconnection fees; universalizing smartphones; planning for 5G frequency; testing mobile money; and dealing with spam email and messages. As a result, Vietnam’s ICT sector saw some remarkable policy development within the year, as summarized below.

1. Telecom

Rollout of 5G Network

On September 27, 2019, the Politburo issued Resolution 52-NQ/TW on the orientation and proactive policies for Vietnam’s participation in Industrial Revolution 4.0, which sets a target of having nationwide 5G network coverage in place by 2030 and giving all citizens access to broadband internet with low cost. According to the MIC, 5G technology would bring a new economy, helping the country create a series of new products for smart cities.

The government issued the first license to test 5G to Viettel, which began testing 5G in Hanoi and Ho Chi Minh City in May 2019. Tests are expected to be completed in January 2020. MobiFone has received a license to become the second operator to conduct 5G network testing, and MobiFone and Vinaphone are expected to launch their own 5G networks in 2021.

Vietnam is expected to commercially launch 5G in 2020, which would make it one of the leading countries in the ASEAN region in 5G commercial deployment. The MIC also has submitted to the Prime Minister (PM) a plan to stop the old 2G mobile technology by 2022. Currently, there are three existing land mobile technologies: 2G deployed since 1990, 3G deployed since 2009, and 4G deployed since 2016.

Amendment of Decree 25/2011/ND-CP on Telecommunications

The MIC submitted a draft decree to amend Decree 25/2011/ND-CP on Telecommunications to the government in 2019. This draft decree deals with some key issues of competition management, provision and retention of subscriber information, revocation of telecom business licenses, and revocation of telecom numbering. However, the MIC is now reconsidering certain issues in the draft decree and expects to submit the clarification and explanation to the government in 2020, according to an unofficial source.

2. Internet

Management and Use of Internet Resources

The Minister of the MIC issued Circular 06/2019/TT-BTTTT on July 19, 2019, to amend Circular 24/2015/TT-BTTT on the Management and Use of Internet Resources. Circular 06 aims at administrative reform and dealing with issues such as changing the name of internet resource users in case of merger or reorganization; handling violations in domain name registration, such as providing inaccurate information or forging and impersonating identities; and revocation of domain names.

3. Cybersecurity

Law on Cybersecurity and Draft Decree on Implementation

Vietnam’s new Cybersecurity Law came into effect on 1 January 2019, with a majority of its provisions enforceable as from the effective date of the law. However, there are still certain provisions of the law which need to be further guided by implementing regulations and guidelines, including the important and controversial Article 26 on data localization. A draft decree with further guidance on data localization is now being considered by the government but there has been no official news as to when the decree will be issued. According to an unofficial source, it may be issued in the first quarter of 2020.

The draft decree has narrowed down the broad language of Article 26.3, setting out that storing data and/or having branches or representative offices in Vietnam is required for foreign service providers only for the protection of national security, social order and safety, social ethics, and community health, and when the three following criteria are fulfilled: (i) such enterprise provides regulated services; (ii) such enterprise carries out activities of collecting, exploiting [using], analyzing and processing the regulated types of data; and (iii) such enterprise has been warned that the services it provides are used to commit a breach of the laws of Vietnam and it does not take any measures for avoiding, dealing with, fighting against or preventing such breach, or resisted, obstructed, or ignored requests from the relevant authorities.

List of Potentially Unsafe Products and Goods Under the Management of the MIC

The MIC issued Circular 05/2019/TT-BTTTT on the List of Potentially Unsafe Products and Goods Under the Management of the MIC. Accordingly, some key goods required to be declared for conformity to technical regulations include desktop and laptop computers; tablets; set-top boxes; amplification equipment in cable TV systems; and cordless telephone equipment (except for DECT equipment). The quality of these goods will be managed based on certification of conformity to technical regulations, declaration of conformity to technical regulations, and quality inspection.

Increased Network Safety and Security to Improve Vietnam’s Ranking

On June 7, 2019, the Prime Minister issued Directive 14/CT-TTg on Increasing Network Safety and Security to Improve Vietnam’s Ranking. In 2018 and early 2019, there were a number of intentional cyber attacks and thefts of state secrets which caused serious consequences. This had an effect on Vietnam’s ranking in the Global Cybersecurity Index of the International Telecommunication Union. According to the unofficial ranking in March 2019 for the period of 2017-2018, Vietnam ranked 50th out of 194 in the assessed countries and territories, and 5th out of 11 in Southeast Asia.

In the recent directive, the PM required agencies, organizations and state enterprises to implement comprehensive solutions to ensure network safety and security in order to contribute to improvement of Vietnam’s ranking in the Global Cybersecurity Index. The PM also prioritized the use of domestic products, solutions and services for important information systems.

Establishment of Alliance for Handling Malicious Code and Preventing Network Attacks

The signing ceremony and announcement of the establishment of the Alliance for Handling Malicious Code and Preventing Cyber Attacks took place on April 17, 2019, in Hanoi in the context of Vietnam Security Summit 2019. The Alliance operates under the guidance of the MIC and Vietnam Information Security Association. The five founding members of the Alliance are Viettel Network Security Company, VNPT Information Security Center, FPT Network Security Center, BKAV Joint Stock Company and CMC Information Safety and Security Ltd.

4. Data Privacy

Draft Decree on Combating Spam Messages, Email, and Calls and Regulations on Advertising via Text Messages, Email, and Phone Calls

The MIC was determined to implement multiple solutions to resolve the problem of pre-activated SIM and spam messages. By the end of 2019, it was reported that the number of spam messages was dramatically reduced by over 90%.

The MIC drafted a decree on anti-spamming to replace Decree 90/2008/ND-CP (as amended by Decree 77/2012/ND-CP). The draft Decree on Combating Spam Messages, Email, and Calls and Regulations on Advertising via Text Messages, Email, and Phone Calls was released for public consultation from August 6 to October 6, 2019, and was submitted to the government in December 2019.

According to the draft decree, the MIC will build and operate a system where users can easily report and forward spam and advertising messages. The draft also provides a mechanism for users to be placed on a “Do Not Text or Call” list to avoid all advertising text messages and advertising calls. The MIC will also build an IP blacklist with regard to IP addresses which distribute spam email from commercial and non-commercial sources.

The principles for advertising via text messages, email and telephone calls include: senders must stop sending to recipients immediately after receipt of the recipient’s refusal; advertising can only be send from electronic addresses and systems as prescribed by the MIC; advertisers may not send/make more than three advertising messages, three advertising emails, and one advertising call to an electronic address within 24 hours, unless otherwise agreed with the recipient; and advertising text messages and phone calls can only be sent/made between 7 a.m. and 10 p.m. unless otherwise agreed with the recipient. Advertising content must conform to the Law on Advertising.

5. Television

Draft Decree to Amend Decree 06 on Broadcasting and TV Services

The MIC released a draft decree to amend Decree 06/2016/ND-CP on the Management, Provision, and Utilization of Broadcasting and TV Services in July 2018, and later a new draft version (version 4) in December 2018 in an attempt to regulate content on demand and video on demand, also known as OTT (over-the-top) TV services. The draft decree regulates some key content, including licensing of paid OTT TV Services; expanding the list of foreign content which must be translated to include TV shows (reality TV, game shows), and the translation and editing must be done by a licensed press agency; not allowing pre-installed advertisement from overseas and requiring licensed press agencies to be responsible for the installation of any advertisement in Vietnam; requiring the proportion of domestic programs with regard to on-demand internet TV services to be not less than 30% of the total programs. These main issues have been attracting many concerns from international companies and organizations. According to an unofficial source, after back and forth between the government and the MIC, the draft is now back to the MIC for further consideration.

6. E-commerce

Mobile Money

Mobile money is understood as the use of a mobile device to transfer money, pay bills, buy or sell goods in a digital environment, without needing a bank account to make the transactions. The MIC is encouraging the development of mobile money to spur economic growth and reduce social costs of transactions. According to the MIC, based on current statistics, more than 50% of the Vietnamese population does not have a bank account, thus, mobile money helps provide non-bank customers a non-cash payment channel and instrument, thereby contributing to the government’s policy to increase the rate of non-cash payments.

The State Bank of Vietnam (SBV) has developed and submitted to the PM for approval a pilot project to allow telecom network and service providers to test the use of mobile money. In the draft of the pilot project, the SBV proposes a limit of 10 million VND per month for a mobile money account, then this limit will be adjusted accordingly as the market develops.

An important point of mobile money service is to allow telecom subscribers to use mobile money service without having a bank account. Subscribers can top up mobile money accounts at banks or at agents of telecom enterprises. The SBV will only manage the total accounts of telecom enterprises to avoid payment risks. According to the SBV, it will first issue licenses to telecom enterprises which already have a license to provide intermediary payment services (e-wallets). Currently, Viettel and VNPT have these licenses, and MobiFone is applying for one. After the PM approves licensing for trials of mobile money services, telecom enterprises will have to develop their own pilot schemes to provide services in order to submit to the SBV for licensing.

7. Information Technology

“Make in Vietnam”

The “Make in Vietnam” campaign—emphasizing creativity, design, mastery of technology, and active production in Vietnam—was announced at the National Forum on Vietnam Technology Enterprise Development organized in May 2019.

According to the PM, technology is the key factor for economic development, enabling Vietnam to escape from the middle-income trap and helping Vietnam to become a developed industrial country. To achieve the goal of making Vietnam a prosperous industrial country by 2045, Vietnam needs to take full advantage of the achievements of Industrial Revolution 4.0 with the development of science, technology, and technology businesses. Instead of just buying and mastering technology, Vietnam needs to invent technology by itself. Instead of just assembling and processing, Vietnam needs to move to a new direction of producing Vietnamese products, using technology to solve Vietnam’s problems.

The MIC also developed and submitted to the PM for approval a directive on the development of Vietnamese digital technology enterprises. In addition, to facilitate the development of the IT industry, the MIC submitted to the PM a report on the establishment of centralized IT zones, including Da Nang Software Park No. 2, Da Nang IT Park, and Centralized IT Park in Can Tho City.

Smart Cities

The MIC issued the ICT Reference Framework for Smart Cities (version 1.0) in Decision 829/QD-BTTTT dated May 31, 2019. The purpose of developing this reference framework is to set out the basis for building and developing smart cities in Vietnam in compliance with the principles of smart city development. Some key general principles for developing smart cities include: focusing on serving citizens; ensuring the capacity of information infrastructure to meet the needs of developing smart cities apps and services; promoting shared information infrastructure; encouraging open data; ensuring technology neutrality, focusing on the application of Internet of Things, cloud computing, big data analysis, artificial intelligence and other technology compatible with multiple platforms; optimizing the existing ICT infrastructure; ensuring information safety and security, and the capacity of emergency response to security incidents related to information and critical information infrastructure; and protection of data privacy.

In addition, the MIC announced Vietnam’s Smart City Index for the period up to 2025 (Version 1.0) on 13 September 13, 2019. This index is used to evaluate the degree of “smartization” of smart cities’ activities in accordance with the orientation and goals of developing sustainable smart cities for the period of 2018-2025, with an orientation to 2030. Furthermore, the MIC also issued documents guiding provinces and cities to implement pilot smart city services in order to avoid scattered and wasteful investment.

Importation and Repair of Used IT Goods

The PM issued Decision 31/2019/QD-TTg dated October 9, 2019, on Importation of Used IT Goods Under Import Prohibition for the Purposes of Scientific Research and Processing and Repair of Used IT Goods Under Import Prohibition for Foreign Partners to Sell Abroad. This decision prescribes the dossiers, order, procedures and competence to permit the importation of goods on the list of used IT products banned from import for the two above-mentioned purposes.

The general criteria and conditions for importation include that the used IT goods are imported only for scientific research or processing and repairing activities and not for selling or giving, and the goods must not cause environmental pollution in accordance with the law on environmental protection. Traders importing used IT goods for scientific research must re-export or destroy the goods in accordance with law within three months from the completion of the scientific research. Traders importing used IT goods for processing and repairing activities must re-export all products to foreign countries after processing and repairing the goods, and are not allowed to sell those products in Vietnam.

Draft Plan on National Digital Transformation to 2025, with an Orientation to 2030

With the goal of Vietnam becoming a digital, stable and prosperous country, the process of national digital transformation is proposed to be carried out in three phases. Phase 1 (2020-2022) is the digitization of industries, and digital transformation of the economy, society, and state agencies to increase productivity and create new sources of growth; Phase 2 (2023-2025) is enhancing the competitiveness of the economy by digital transformation; and Phase 3 (2026-2030) is the development of a comprehensive digital economy and society.

RELATED INSIGHTS​ 

July 6, 2026
Vietnam has introduced an official list of high-risk AI systems, triggering more stringent compliance obligations for developers, suppliers, and deployers operating in the country. On June 30, 2026, the prime minister issued Decision No. 33/2026/QD-TTg (Decision 33), which establishes the List of High-Risk AI Systems under the Law on Artificial Intelligence (AI Law) and Decree No. 142/2026/ND-CP (Decree 142). Decision 33 takes effect on August 15, 2026. Decision 33 is significant because only AI systems included on the list will be subject to the heightened compliance obligations applicable to high-risk AI systems under the AI Law and Decree 142. These include, among others, local presence requirements for foreign providers, mandatory conformity assessment before deployment, comprehensive risk management and data quality documentation, and strict liability for damages even when the provider is fully compliant. Decision 33 also specifies the applicable conformity assessment pathway for each listed system, indicating whether the system must undergo mandatory third-party conformity certification before being placed into use, or whether the provider may self-assess conformity or voluntarily engage a registered or recognized conformity assessment body. Which AI Systems Are Covered? Decision 33 identifies high-risk AI systems across six sectors—the key attributes of which are summarized below. Education: AI systems used for automated assessment, learner ranking, behavioral monitoring, or generating educational content from uncontrolled data sources. Ethnic affairs and religion: AI systems used to automatically score, classify, or rank applications for government ethnic policies; approve or reject regulatory applications; suspend benefits on suspicion of fraud; allocate budgets; or infer and classify individuals by ethnicity or religion for administrative purposes. Healthcare: AI-assisted surgical systems and autonomous AI-powered surgical robots. Banking: AI systems that autonomously conduct electronic banking transactions or make credit approval decisions. Judicial proceedings: Certain large-scale biometric identification systems used in public-interest civil proceedings. Transport: Thirty-one categories
July 6, 2026
Indonesia’s regulation on reporting online intellectual property (IP) infringement provides comprehensive procedural guidance for IP rights holders and their licensees in reporting online infringement complaints. Issued in December 2025 by the Ministry of Law as Regulation No. 47 of 2025 regarding Handling of Intellectual Property Infringement Reports in Electronic Systems, this regulation covers all types of IP rights. It also specifies documentation when reporting infringement, and lays out the procedures for examination, verification, and enforcement actions. Submission of Complaints Complainants may submit reports through the online system of the Directorate General of Intellectual Property (DGIP) or in person at the DGIP office. Complaints may also be filed through an authorized proxy. Under the regulation, complainants are required to provide the following information and documents: Personal details of the complainant; Brief description of the protected work or subject matter (i.e., type of IP and name or address of the infringing website, portal, account, or application, or a link to the location of the infringing content); Complete description of the alleged infringement; Certificate of registration or recordal of the relevant IP; Recordal of IP license agreement, if any; and Other supporting evidence. Verification and Examination Process Upon receiving a complaint, the responsible formality officer may request clarification or additional supporting documents. In the latter case, the complainant must then submit the necessary administrative documents within 14 days of the notification date. Once the documentation is deemed complete and sufficient, the case will be formally registered. Subsequently, the DGIP will establish a verification team to handle online IP violations, which will include the Civil Servant Investigator (PPNS), the Ministry of Communication and Digital Affairs, experts with relevant expertise in IP, and representatives from related associations such as AVISI (Indonesian Video Streaming Association). After examining the report, the team will prepare the Minutes
July 6, 2026
Tilleke & Gibbins has contributed the Vietnam chapter to Data Protection & Privacy 2027, a global guide published by Lexology Panoramic that provides comparative insights into data protection and privacy regimes across multiple jurisdictions. The Vietnam chapter offers a comprehensive overview of the country’s data protection framework, addressing both regulatory structure and practical compliance considerations for businesses operating in or engaging with Vietnam. Topics covered include: Law and the regulatory authority: Legislative framework; data protection authority; cooperation with other data protection authorities; breaches of data protection law; judicial review of data protection authority orders Scope: Exempt sectors and institutions; interception of communications and surveillance laws; other laws; personal information formats; extraterritoriality; covered uses of personal information Legitimate processing of personal information: Lawful bases for processing; grounds for legitimate processing; types of personal information Data handling responsibilities of owners of personal information: Transparency; exemptions from transparency obligations; data accuracy; data minimization; data retention; purpose limitation; automated decision-making Security: Security obligations; notification of data breaches; internal controls Accountability: Data protection officer requirements; record-keeping; risk assessment; design of personal information processing systems Registration and notification: Registration requirements; other transparency duties Sharing and cross-border transfers of personal information: Sharing with processors and service providers; restrictions on third-party disclosures; cross-border transfers; further transfers; localization requirements Rights of individuals: Right of access; other statutory rights; compensation Enforcement: Enforcement mechanisms; exemptions, derogations, and restrictions; further exemptions and restrictions Specific data processing: Cookies and similar technologies; electronic communications marketing; targeted advertising; sensitive personal information; profiling; cloud services The chapter concludes with an update on key legal and regulatory developments over the past year and emerging trends in Vietnam’s data protection landscape. The full Vietnam chapter is available as a PDF through the button below. Readers can also gain 30 days of complementary access to the full Data
July 2, 2026
Thailand’s Electronic Transactions Development Agency (ETDA) released a new version of the draft Act on Artificial Intelligence on July 2, 2026, for a public hearing period expected to be approximately 30 days. The draft act adopts a risk-based regulatory approach modeled in part on international frameworks—particularly the EU’s AI Act—while incorporating provisions tailored to Thailand’s regulatory landscape and digital economy objectives. If enacted in its current form, the law would introduce extraterritorial obligations, a tiered risk classification system, strict liability for AI-related damages, and new transparency requirements for AI-generated content. Scope and Extraterritorial Application The draft act applies to AI development, deployment, or any other action affecting people in Thailand, even if the action occurs outside the country. Of note: This extraterritorial reach creates compliance obligations for global AI companies whose systems impact Thai residents or consumers, even if the provider has no physical presence in Thailand. Foreign AI providers serving Thai deployers or users must appoint a local coordinator or authorized representative. Depending on the type of AI system, the representative may need full authority to act on behalf of the provider without any limitation of liability. Certain activities are exempt from the draft act’s oversight, including AI used by natural persons solely for personal or household activities, AI for educational research conducted by higher education institutions with ethics committee approval, research and development activities conducted prior to distribution or service provision, and other AI systems prescribed by royal decree. Risk-Based Classification Framework The draft act establishes a tiered risk classification system with three main categories: Prohibited AI. The act outright prohibits AI systems employing cognitive-behavioral manipulation using subliminal techniques, AI systems causing unfair broad-scale discrimination from processing irrelevant data, and other categories of serious risk as determined by announcement of a forthcoming committee that will be responsible