You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 25, 2025

Vietnam’s Digital Tech Industry Law: Building the Future of AI, Chips, and Digital Assets

Subscribe to Updates

Artificial intelligence (AI), semiconductors, and digital assets are considered critical drivers of Vietnam’s future economic growth and are fundamental to the nation’s digital transformation targets. These sectors form the core of Vietnam’s strategy to build a robust, globally competitive digital economy. This strategic direction gained substantial momentum with the issuance of the Law on Digital Technology Industry (DTI Law) on June 14, 2025.

The DTI Law was designed to attract investment, stimulate innovation, cultivate high-quality human resources, and ensure the responsible, secure, and sustainable growth of digital technologies like AI and digital assets, harmonizing Vietnam’s digital industry with international standards while safeguarding public interests and national security.

Several key provisions of the DTI Law took effect on July 1, 2025, and the law will become fully effective on January 1, 2026. The government is delegated to provide further necessary guidelines and details for implementation of the law.

Artificial Intelligence (AI): Principle-Driven and Risk-Based Regulations

Under the DTI Law, there are seven core principles guiding the development, provision, and use of AI which are applicable to AI developers, providers and deployers. These principles favor values-based governance over purely technical prescriptions, and include the following:

  • Taking a human-centered approach that upholds ethical values, inclusivity, flexibility, equality, and non-discrimination.
  • Ensuring transparency, accountability, and explainability, with AI systems remaining under human control.
  • Maintaining cybersecurity and system safety.
  • Adherence to data protection and privacy regulations.
  • Having the ability to control AI algorithms and models.
  • Effective risk management throughout the entire lifecycle of AI systems.
  • Compliance with consumer protection laws and other relevant legal frameworks.

AI system management follows a risk-based approach, with the law categorizing systems into high-risk, high-impact, and other groups. High-risk AI systems are those that, in certain applications, may pose significant threats or harm to individuals or the public interest while high-impact systems are designed for multi-purpose use, involving a large user base, extensive parameters, and massive data processing capabilities.

Both high-risk and high-impact systems are subject to stringent regulatory requirements, including technical requirements, transparency in data storage and disclosure, data governance, monitoring and inspection, cybersecurity, and other applicable obligations. Enterprises developing or deploying such systems should therefore begin mapping their AI inventories and preparing documented risk assessments to accelerate future compliance.

AI systems that directly interact with humans must clearly notify their users of their AI aspects. Additionally, digital technology products generated by AI, if listed in the official list issued by the Minister of Science and Technology, must carry identifiable markers detectable by either users or machines.

Semiconductors: Building a Competitive and Vertically Integrated Ecosystem

Vietnam’s semiconductor industry development is guided by four key principles:

  • Focusing on breakthrough semiconductor chip development across sectors, closely linked to the global semiconductor ecosystem (research, design, manufacturing, packaging, testing).
  • Aligning semiconductor development with the electronics industry, with a focus on specialized electronic devices in various sectors.
  • Ensuring sufficient and high-quality human resources for the semiconductor industry.
  • Promoting foreign investment and mobilizing both domestic and international resources to master semiconductor chip technology, design, and production.

The government will establish a semiconductor development strategy based on these four principles and aligned with Vietnam’s socio-economic strategies and management needs. Enterprises are encouraged to closely follow up the country’s semiconductor development strategy to identify potential opportunities for its benefits.

Digital Assets: Legally Recognized for the First Time

For the first time in Vietnamese legislation, the DTI Law recognizes digital assets as property expressed in data form and created, issued, stored, or transferred through digital technologies. The law further classifies them into: (i) virtual assets (excluding securities, digital fiat currency, and other regulated financial assets); (ii) crypto assets (excluding securities, digital fiat currency, and other regulated financial assets), and (iii) other digital assets.

The management of digital assets encompasses several aspects, including establishing and transferring ownership; regulating rights and obligations of involved parties; ensuring cybersecurity, preventing money laundering and terrorist financing; inspection and enforcement; and conditions for businesses providing services crypto asset services.

Incentives for AI and Semiconductor Industries

Vietnam’s DTI Law offers a robust package of investment incentives for projects in AI system development, AI data centers, and semiconductor chip R&D and production, including design, packaging, and testing. These projects are classified as specially prioritized investment sectors and benefit from preferential treatment in areas such as taxation, land use rights, and access to other legal benefits. The government may also provide direct financial support for infrastructure, equipment, and factory construction through local development budgets. Enterprises in these sectors are eligible for customs-related advantages to facilitate import and export activities.

Innovative startups in AI and semiconductors are similarly prioritized, qualifying for incentives under investment, tax, and land laws, and may receive direct funding for workforce training, talent acquisition, R&D, pilot production, consulting, and technology upgrades. The law introduces additional special mechanisms for the semiconductor industry, extending incentives to projects producing materials, machinery, and components that directly support chip manufacturing. Importation of used equipment for semiconductor production is allowed if it meets technical criteria set by the Ministry of Science and Technology, with enterprises required to self-certify compliance. Finally, the law provides targeted support for businesses participating in the semiconductor supply chain, further strengthening Vietnam’s position as a competitive hub for digital technology investment.

Outlook

Although the DTI Law mainly provides a framework and policy-oriented provisions, with specific regulations still needing to be set out in future decrees and circulars, it is essential for businesses to stay ahead of emerging policy trends and regulatory directions shaping the development of Vietnam’s strategic digital technology sectors. Understanding these directions can help businesses seize investment opportunities and gain a first-mover advantage in the fast-evolving digital technology industry. Companies are also encouraged to closely monitor forthcoming guiding regulations under the DTI Law to ensure compliance and fully capitalize on investment incentives and support when rolling out their products and services in the Vietnamese market.

Related Professionals

Industries

Technology

Location

RELATED INSIGHTS​ 

January 13, 2026
On January 9, 2026, Thailand’s Securities and Exchange Commission (SEC) filed a criminal complaint with the Economic Crime Suppression Division (ECD) against five individuals for unauthorized operation of a digital-asset dealer business under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018). This precedent-setting case signals that the regulator is willing to pursue crypto enforcement against natural persons even in the absence of a licensed platform entity. Background and Implications The case follows the SEC’s October 2025 public warning about the use of iris-scanning technology in exchange for certain digital tokens. In its warning, the SEC cautioned that exchanging or trading these specific tokens with unlicensed service providers exposes users to heightened fraud, scam, and money laundering risks. Unlike prior regulatory enforcement matters, which involved platform-level administrative fines for operational or compliance failures, this case targets misconduct by individuals who may not be professional traders but openly advertised their willingness to buy these tokens from the public, opened individual over-the-counter (OTC) trade channels for these tokens, and facilitated off-exchange transactions in a manner resembling ordinary commercial dealing. This enforcement action establishes a clear precedent that natural persons engaging in public-facing digital-asset dealing may face criminal liability under Thai law, even without operating through a corporate or licensed platform structure. Outlook The alleged offenders may not settle this crime by payment of fines. Following the SEC’s referral, the ECD will undertake further investigation, after which prosecutors may review the case and proceed to court. The SEC has stated that it will cooperate fully with enforcement agencies throughout the criminal enforcement process.
Read More
January 9, 2026
Vietnam has taken a decisive step into the global artificial intelligence regulatory landscape with the promulgation of the Law on Artificial Intelligence No. 134/2025/QH15 (AI Law), adopted on December 10, 2025, and effective from March 1, 2026. As one of the earliest comprehensive, standalone AI statutes in Southeast Asia, the AI Law signals Vietnam’s ambition to position itself as both an innovation-friendly and governance-conscious AI market. In doing so, the legislature has also streamlined Vietnam’s AI regulatory architecture. The AI Law repeals most AI-related provisions previously embedded in the Law on Digital Technology Industry No. 71/2025/QH15, consolidating AI governance under a single, unified legal framework. This structural move underscores an intent to provide greater regulatory clarity and coherence for businesses operating across the AI value chain. Against this backdrop, the key question for AI developers, providers, deployers, and governance teams is how the new risk-based framework will shape compliance expectations, operational decisions, and governance design in practice. This article examines the new AI Law through that practical lens, focusing on what it means for AI businesses operating in or into Vietnam. Scope of Application The AI Law applies broadly to Vietnamese organizations and individuals, as well as foreign entities that participate in AI-related activities within Vietnam. The law expressly excludes AI activities conducted solely for national defense, security, and cryptography purposes. A defining feature of the AI Law is that it regulates by role, not by industry. It distinguishes between: Developers, who design, build, train, test, or fine-tune AI models and have direct control over the technical methods, training data, or model parameters; Providers, who place AI systems on the market or put them into use under their own names; Deployers, who use AI systems under their control in professional, commercial, or service-provision activities; Users, who interact with AI
Read More
January 9, 2026
Thailand continues to advance its legal and regulatory framework for the technology sector, with several key laws undergoing review and proposed amendments. These developments reflect Thailand’s broader efforts to ensure that its regulatory landscape keeps pace with rapid technological change and aligns more closely with international standards and best practices. The following are key legal developments and proposed legislative reforms in 2026 that are expected to impact businesses operating in the technology sector and the broader Thai business landscape. Data Privacy and Cybersecurity Personal Data Protection Act B.E. 2562 (2019) Following the full enforcement of Thailand’s Personal Data Protection Act (PDPA) in June 2022, businesses and practitioners have identified practical implementation challenges and interpretative issues. These challenges were reflected in an effectiveness assessment conducted by the Personal Data Protection Committee (PDPC) in late 2024. The PDPC published a set of principles for public consultation to identify issues and directions for potential amendments to the PDPA. Key issues: Emerging issues include clarifying the definitions of “data controller,” “data processor,” and “criminal record”; revisiting the scope of sensitive personal data to better reflect Thailand’s context; proposing amendments to the hierarchy of legal bases to avoid misconceptions of consent as the default legal basis; and clarifying the required level of expressiveness for explicit consent, as well as rules for collecting personal data from other sources. Current status: The first round of public consultation has concluded. Next steps: The proposed amendments are proceeding to a revised draft following the consultation outcomes. Cybersecurity Act B.E. 2562 (2019) Thailand is moving forward with proposed amendments to enhance the effectiveness of its national cybersecurity framework, as evolving digital technologies bring new risks such as misinformation, system intrusions, and attacks on critical infrastructure, making cybersecurity a national priority. Key issues: The amendments aim to clarify and strengthen
Read More
January 8, 2026
Thailand’s Digital Government Development Agency (DGA) has proposed new standards that would require government agencies to select cloud services exclusively from a preapproved shortlist of providers. The draft Digital Government Standards re: Cloud Service Provider Standards aims to strengthen procurement confidence and reduce risks associated with selecting cloud service providers that do not meet the required standards. A public hearing period on these standards concluded on December 27, 2025. The DGA will now review submitted comments and consider revising the standards accordingly. Shortlisted Cloud Service Provider Tiers The draft standards establish three tiers of cloud service providers based on their assessed service capability levels, core qualifications, and certifications. The DGA sets qualification requirements for each tier, and it is at the discretion of each agency to select the tier of cloud service provider that best suits its operational needs, as follows: Tier 1 cloud service providers are suitable for providing services involving disclosable official data. Tier 2 cloud service providers are suitable for handling official data and protected data, such as personal data, which requires a high-security public cloud (e.g., virtual private cloud). Tier 3 cloud service providers are suitable for providing services to agencies with specific regulatory and security requirements that handle highly protected data, such as the national security system. These providers must offer sovereign or hybrid cloud as stipulated by the Ministry of Digital Economy and Society. All tiers of cloud service providers must be legal entities incorporated under Thai law and can be authorized distributors of offshore cloud service providers. However, each tier will be subject to different requirements, including infrastructure obligations. Government agencies are encouraged to select a cloud service provider appropriate for their intended use. For example, if a government agency intends to procure cloud services for operating applications that process personal data,
Read More