You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 25, 2025

Vietnam’s Digital Tech Industry Law: Building the Future of AI, Chips, and Digital Assets

Subscribe to Updates

Artificial intelligence (AI), semiconductors, and digital assets are considered critical drivers of Vietnam’s future economic growth and are fundamental to the nation’s digital transformation targets. These sectors form the core of Vietnam’s strategy to build a robust, globally competitive digital economy. This strategic direction gained substantial momentum with the issuance of the Law on Digital Technology Industry (DTI Law) on June 14, 2025.

The DTI Law was designed to attract investment, stimulate innovation, cultivate high-quality human resources, and ensure the responsible, secure, and sustainable growth of digital technologies like AI and digital assets, harmonizing Vietnam’s digital industry with international standards while safeguarding public interests and national security.

Several key provisions of the DTI Law took effect on July 1, 2025, and the law will become fully effective on January 1, 2026. The government is delegated to provide further necessary guidelines and details for implementation of the law.

Artificial Intelligence (AI): Principle-Driven and Risk-Based Regulations

Under the DTI Law, there are seven core principles guiding the development, provision, and use of AI which are applicable to AI developers, providers and deployers. These principles favor values-based governance over purely technical prescriptions, and include the following:

  • Taking a human-centered approach that upholds ethical values, inclusivity, flexibility, equality, and non-discrimination.
  • Ensuring transparency, accountability, and explainability, with AI systems remaining under human control.
  • Maintaining cybersecurity and system safety.
  • Adherence to data protection and privacy regulations.
  • Having the ability to control AI algorithms and models.
  • Effective risk management throughout the entire lifecycle of AI systems.
  • Compliance with consumer protection laws and other relevant legal frameworks.

AI system management follows a risk-based approach, with the law categorizing systems into high-risk, high-impact, and other groups. High-risk AI systems are those that, in certain applications, may pose significant threats or harm to individuals or the public interest while high-impact systems are designed for multi-purpose use, involving a large user base, extensive parameters, and massive data processing capabilities.

Both high-risk and high-impact systems are subject to stringent regulatory requirements, including technical requirements, transparency in data storage and disclosure, data governance, monitoring and inspection, cybersecurity, and other applicable obligations. Enterprises developing or deploying such systems should therefore begin mapping their AI inventories and preparing documented risk assessments to accelerate future compliance.

AI systems that directly interact with humans must clearly notify their users of their AI aspects. Additionally, digital technology products generated by AI, if listed in the official list issued by the Minister of Science and Technology, must carry identifiable markers detectable by either users or machines.

Semiconductors: Building a Competitive and Vertically Integrated Ecosystem

Vietnam’s semiconductor industry development is guided by four key principles:

  • Focusing on breakthrough semiconductor chip development across sectors, closely linked to the global semiconductor ecosystem (research, design, manufacturing, packaging, testing).
  • Aligning semiconductor development with the electronics industry, with a focus on specialized electronic devices in various sectors.
  • Ensuring sufficient and high-quality human resources for the semiconductor industry.
  • Promoting foreign investment and mobilizing both domestic and international resources to master semiconductor chip technology, design, and production.

The government will establish a semiconductor development strategy based on these four principles and aligned with Vietnam’s socio-economic strategies and management needs. Enterprises are encouraged to closely follow up the country’s semiconductor development strategy to identify potential opportunities for its benefits.

Digital Assets: Legally Recognized for the First Time

For the first time in Vietnamese legislation, the DTI Law recognizes digital assets as property expressed in data form and created, issued, stored, or transferred through digital technologies. The law further classifies them into: (i) virtual assets (excluding securities, digital fiat currency, and other regulated financial assets); (ii) crypto assets (excluding securities, digital fiat currency, and other regulated financial assets), and (iii) other digital assets.

The management of digital assets encompasses several aspects, including establishing and transferring ownership; regulating rights and obligations of involved parties; ensuring cybersecurity, preventing money laundering and terrorist financing; inspection and enforcement; and conditions for businesses providing services crypto asset services.

Incentives for AI and Semiconductor Industries

Vietnam’s DTI Law offers a robust package of investment incentives for projects in AI system development, AI data centers, and semiconductor chip R&D and production, including design, packaging, and testing. These projects are classified as specially prioritized investment sectors and benefit from preferential treatment in areas such as taxation, land use rights, and access to other legal benefits. The government may also provide direct financial support for infrastructure, equipment, and factory construction through local development budgets. Enterprises in these sectors are eligible for customs-related advantages to facilitate import and export activities.

Innovative startups in AI and semiconductors are similarly prioritized, qualifying for incentives under investment, tax, and land laws, and may receive direct funding for workforce training, talent acquisition, R&D, pilot production, consulting, and technology upgrades. The law introduces additional special mechanisms for the semiconductor industry, extending incentives to projects producing materials, machinery, and components that directly support chip manufacturing. Importation of used equipment for semiconductor production is allowed if it meets technical criteria set by the Ministry of Science and Technology, with enterprises required to self-certify compliance. Finally, the law provides targeted support for businesses participating in the semiconductor supply chain, further strengthening Vietnam’s position as a competitive hub for digital technology investment.

Outlook

Although the DTI Law mainly provides a framework and policy-oriented provisions, with specific regulations still needing to be set out in future decrees and circulars, it is essential for businesses to stay ahead of emerging policy trends and regulatory directions shaping the development of Vietnam’s strategic digital technology sectors. Understanding these directions can help businesses seize investment opportunities and gain a first-mover advantage in the fast-evolving digital technology industry. Companies are also encouraged to closely monitor forthcoming guiding regulations under the DTI Law to ensure compliance and fully capitalize on investment incentives and support when rolling out their products and services in the Vietnamese market.

Related Professionals

Industries

Technology

Location

RELATED INSIGHTS​ 

March 27, 2026
In response to the rapid advancement of artificial intelligence (AI) and evolving global digital trends, Thailand has undertaken significant efforts to establish a comprehensive national policy framework aimed at fostering an AI ecosystem. This framework seeks to promote the responsible development and deployment of AI technology to enhance Thailand’s economic competitiveness and improve quality of life, with targeted implementation by 2027. In furtherance of this national AI policy, regulatory authorities have initiated efforts to develop and refine the applicable legal framework, including the drafting of Thailand’s first unified AI legislation. Pending the composing and enactment of such comprehensive legislation, sector-specific regulators have proactively issued guidelines applicable to regulated entities within their respective jurisdictions, including financial institutions, banks, insurance companies, securities and derivatives business operators, and digital asset service providers. Concurrently, cross-sectoral regulatory bodies, notably the Personal Data Protection Committee (PDPC) and the National Cyber Security Agency (NCSA), have promulgated guidelines applicable to all business operators within their regulatory purview. While unified AI legislation has not been enacted, the design, development and use of AI in Thailand in various industries is still subject to existing sector-specific legislation. National AI policy The Thai cabinet approved the Thailand National AI Strategy and Action Plan (2022-2027) in July 2022, aiming to establish an AI development and application ecosystem by 2027. The strategy is built around five pillars: Preparing social, ethical, legal and regulatory readiness for AI; Developing national infrastructure; Increasing human capability and AI education; Driving AI technology and innovation; and Promoting AI adoption in public and private sectors. The above-mentioned national AI committee, under the National Digital Economy and Society Committee (NDESC), was established in August 2022, chaired by the prime minister. Comprehensive legislation Following the national AI strategy, the government has been developing comprehensive AI legislation to govern and promote AI
Read More
March 20, 2026
Thailand’s Board of Investment (BOI) now requires data center projects to demonstrate measurable benefits for local workforce development, R&D, SME capability, and domestic supply chains to qualify for corporate income tax (CIT) exemptions. BOI Notification No. Por. 3/2569, issued on February 6, 2026, updates the requirements for projects seeking promotion under BOI category 8.2.1 (data centers). All data center projects must now submit and implement plans covering development of Thai human resources and domestic supply chain support before benefiting from any CIT exemption. Human Resources Development Plan The BOI seeks to promote local talent development beyond basic training. Plans must include the following elements: Training for data center design, construction, and operations targeting vocational students, engineering and ICT undergraduates and postgraduates, and energy and building personnel in Thailand. Joint curricula with Thai universities and technical institutes. Collaborative R&D with Thai nationals or institutions in areas including AI, resource allocation, high-performance computing, and data center hardware and systems. Thai SME upskilling in electrical and energy systems and IT services. Domestic Supply Chain Support Plan Plans must demonstrate knowledge transfer in design, construction, cooling, security, and power and water management. Projects must also include usage or installation of domestically manufactured equipment or engage specialist domestic entities. Criteria for BOI Evaluation The BOI will assess data center operators’ eligibility for CIT incentives based on two criteria: Scale requirement: Training and joint-curriculum initiatives must reach a total participants equal to at least 10 times the project headcount and run for the duration of the CIT incentive. If this threshold is not met, the applicant must also implement continuous R&D or SME skills-development plans throughout the incentive period. Substantiality test: Supply-chain plans must be substantive, meet industry standards, and show measurable development of the domestic digital and data center supply base. To ensure compliance,
Read More
March 19, 2026
Thailand’s Electronic Transactions Development Agency (ETDA), which describes itself as a “co-creation regulator” working collaboratively with industry rather than imposing top-down rules, has unveiled its regulatory roadmap for digital platform businesses under the Royal Decree on Digital Platform Service Businesses B.E. 2565 (2022). The 2026 regulatory approach is guided by three core principles—“practicable, verifiable, shared responsibility”—aimed at elevating digital services to be safe, transparent, and fair. These principles inform ETDA’s 2026 priorities, which focus on three key dimensions: product and service standards on platforms, fair competition and fee transparency, and online fraud prevention. Product and Service Standards ETDA’s 2026 agenda addresses product and service standards across several platform categories: Online marketplace platforms. The Notification on Additional Measures for Online Marketplace Platforms under Section 18(2) came into force on December 31, 2025, designating 21 marketplace platforms that must verify products and merchants. Among other obligations, covered platforms must remove or suspend substandard products under the “notice and take down” principle. The ETDA has collaborated with the Food and Drug Administration and the Thai Industrial Standards Institute to develop inspection manuals and coordinate compliance procedures. Social commerce. The ETDA is preparing a new notification under Section 18(2) specifically targeting social commerce platforms with sales support functions, aiming to align regulation with evolving digital market conditions. Ride sharing. Since the postponement of the deadline to comply with the ETDA’s notification on ride-sharing platforms to March 31, 2026, the ETDA has supported drivers in registering with the Department of Land Transport through the Driver Verify registration system, which has already issued certifications to approximately 27,900 riders. The ETDA is also examining structural issues relating to appropriate insurance packages, motorcycle engine capacity expansion, and fair leasing fees and contract transfer costs in coordination with the Department of Land Transport, the Office of Insurance Commission,
Read More
March 19, 2026
Thailand’s Personal Data Protection Committee (PDPC) has launched a public consultation period to gather input for a forthcoming set of guidelines under the country’s Personal Data Protection Act (PDPA). This initiative follows the PDPC’s issuance of guidelines on consent and notification requirements in September 2022. The main consultation period, using an online questionnaire to gather feedback, runs until March 23, 2026. In addition, an interview-style online session for private-sector participants was held on March 17, and a two-day in-person event will be held on April 1–2—this is already fully booked and  walk-ins will not be accepted, but the session will be livestreamed on the PDPC’s Facebook page. The PDPC will use the public feedback to design draft guidelines that accurately reflect the operational realities of both public and private organizations, after which the guidelines will be shared with the public. Consultation Scope The PDPC has identified six priority areas for which upcoming guidance may be issued: Legal bases for processing: The online questionnaire assesses respondents’ understanding of consent requirements and seeks views on priority issues, such as explanations of the legal bases and considerations for selecting an appropriate legal basis depending on the nature of the processing activity. Security measures and data breach notification: The questionnaire examines respondents’ understanding of data breach reporting and security measure obligations. Topics proposed for inclusion in the guidelines include data breach prevention measures, incident response plans, risk assessment methods, and reporting procedures. Data protection officers: Respondents are invited to share their expectations regarding the DPO’s role and their experiences in contacting a DPO. The survey also asks respondents to identify priority issues, such as response timeframes for data subject requests and complaint procedures. Marketing and direct marketing: The online questionnaire seeks input on preferred topics for guidance, including individuals’ rights to refuse marketing
Read More