You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 25, 2025

Vietnam’s Digital Tech Industry Law: Building the Future of AI, Chips, and Digital Assets

Subscribe to Updates

Artificial intelligence (AI), semiconductors, and digital assets are considered critical drivers of Vietnam’s future economic growth and are fundamental to the nation’s digital transformation targets. These sectors form the core of Vietnam’s strategy to build a robust, globally competitive digital economy. This strategic direction gained substantial momentum with the issuance of the Law on Digital Technology Industry (DTI Law) on June 14, 2025.

The DTI Law was designed to attract investment, stimulate innovation, cultivate high-quality human resources, and ensure the responsible, secure, and sustainable growth of digital technologies like AI and digital assets, harmonizing Vietnam’s digital industry with international standards while safeguarding public interests and national security.

Several key provisions of the DTI Law took effect on July 1, 2025, and the law will become fully effective on January 1, 2026. The government is delegated to provide further necessary guidelines and details for implementation of the law.

Artificial Intelligence (AI): Principle-Driven and Risk-Based Regulations

Under the DTI Law, there are seven core principles guiding the development, provision, and use of AI which are applicable to AI developers, providers and deployers. These principles favor values-based governance over purely technical prescriptions, and include the following:

  • Taking a human-centered approach that upholds ethical values, inclusivity, flexibility, equality, and non-discrimination.
  • Ensuring transparency, accountability, and explainability, with AI systems remaining under human control.
  • Maintaining cybersecurity and system safety.
  • Adherence to data protection and privacy regulations.
  • Having the ability to control AI algorithms and models.
  • Effective risk management throughout the entire lifecycle of AI systems.
  • Compliance with consumer protection laws and other relevant legal frameworks.

AI system management follows a risk-based approach, with the law categorizing systems into high-risk, high-impact, and other groups. High-risk AI systems are those that, in certain applications, may pose significant threats or harm to individuals or the public interest while high-impact systems are designed for multi-purpose use, involving a large user base, extensive parameters, and massive data processing capabilities.

Both high-risk and high-impact systems are subject to stringent regulatory requirements, including technical requirements, transparency in data storage and disclosure, data governance, monitoring and inspection, cybersecurity, and other applicable obligations. Enterprises developing or deploying such systems should therefore begin mapping their AI inventories and preparing documented risk assessments to accelerate future compliance.

AI systems that directly interact with humans must clearly notify their users of their AI aspects. Additionally, digital technology products generated by AI, if listed in the official list issued by the Minister of Science and Technology, must carry identifiable markers detectable by either users or machines.

Semiconductors: Building a Competitive and Vertically Integrated Ecosystem

Vietnam’s semiconductor industry development is guided by four key principles:

  • Focusing on breakthrough semiconductor chip development across sectors, closely linked to the global semiconductor ecosystem (research, design, manufacturing, packaging, testing).
  • Aligning semiconductor development with the electronics industry, with a focus on specialized electronic devices in various sectors.
  • Ensuring sufficient and high-quality human resources for the semiconductor industry.
  • Promoting foreign investment and mobilizing both domestic and international resources to master semiconductor chip technology, design, and production.

The government will establish a semiconductor development strategy based on these four principles and aligned with Vietnam’s socio-economic strategies and management needs. Enterprises are encouraged to closely follow up the country’s semiconductor development strategy to identify potential opportunities for its benefits.

Digital Assets: Legally Recognized for the First Time

For the first time in Vietnamese legislation, the DTI Law recognizes digital assets as property expressed in data form and created, issued, stored, or transferred through digital technologies. The law further classifies them into: (i) virtual assets (excluding securities, digital fiat currency, and other regulated financial assets); (ii) crypto assets (excluding securities, digital fiat currency, and other regulated financial assets), and (iii) other digital assets.

The management of digital assets encompasses several aspects, including establishing and transferring ownership; regulating rights and obligations of involved parties; ensuring cybersecurity, preventing money laundering and terrorist financing; inspection and enforcement; and conditions for businesses providing services crypto asset services.

Incentives for AI and Semiconductor Industries

Vietnam’s DTI Law offers a robust package of investment incentives for projects in AI system development, AI data centers, and semiconductor chip R&D and production, including design, packaging, and testing. These projects are classified as specially prioritized investment sectors and benefit from preferential treatment in areas such as taxation, land use rights, and access to other legal benefits. The government may also provide direct financial support for infrastructure, equipment, and factory construction through local development budgets. Enterprises in these sectors are eligible for customs-related advantages to facilitate import and export activities.

Innovative startups in AI and semiconductors are similarly prioritized, qualifying for incentives under investment, tax, and land laws, and may receive direct funding for workforce training, talent acquisition, R&D, pilot production, consulting, and technology upgrades. The law introduces additional special mechanisms for the semiconductor industry, extending incentives to projects producing materials, machinery, and components that directly support chip manufacturing. Importation of used equipment for semiconductor production is allowed if it meets technical criteria set by the Ministry of Science and Technology, with enterprises required to self-certify compliance. Finally, the law provides targeted support for businesses participating in the semiconductor supply chain, further strengthening Vietnam’s position as a competitive hub for digital technology investment.

Outlook

Although the DTI Law mainly provides a framework and policy-oriented provisions, with specific regulations still needing to be set out in future decrees and circulars, it is essential for businesses to stay ahead of emerging policy trends and regulatory directions shaping the development of Vietnam’s strategic digital technology sectors. Understanding these directions can help businesses seize investment opportunities and gain a first-mover advantage in the fast-evolving digital technology industry. Companies are also encouraged to closely monitor forthcoming guiding regulations under the DTI Law to ensure compliance and fully capitalize on investment incentives and support when rolling out their products and services in the Vietnamese market.

Related Professionals

Industries

Technology

Location

RELATED INSIGHTS​ 

January 8, 2026
Thailand has enacted comprehensive sexual harassment legislation that significantly expands criminal penalties and creates new compliance obligations for online platform operators. The Act Amending the Penal Code (No. 30) B.E. 2568 (2025), enacted on December 29, 2025, and taking effect the following day, introduces a comprehensive definition of sexual harassment, establishes new criminal offenses with graduated penalties, and imposes content removal obligations on social media platforms and computer system service providers. The amendment, which establishes a comprehensive framework for addressing sexual harassment in both physical and digital environments, significantly expands legal exposure for online service operators. It also grants courts authority to order takedowns of violating data accessible to the public. Definition of Sexual Harassment The law introduces “sexual harassment” as a distinct statutory concept covering physical conduct, verbal conduct, sounds, gestures, expressions, postures, communications, surveillance, stalking, and acts committed through computer systems or electronic devices. Conduct qualifies as sexual harassment when it is sexual in nature and likely to cause the victim distress, annoyance, embarrassment, humiliation, fear, or a sense of sexual insecurity. Criminal Offenses and Penalties The amended Penal Code establishes graduated penalties based on the severity and context of the harassment—including enhanced penalties for public or online conduct. For instance: Basic sexual harassment is punishable by imprisonment for up to one year, a fine of up to THB 20,000, or both. Continuous or repeated harassment that prevents normal life escalates penalties to imprisonment for up to two years, a fine of up to THB 40,000, or both. Critically for online operators, harassment committed in public places, in the presence of the public, or through computer systems accessible to the general public triggers imprisonment for up to three years, a fine of up to THB 60,000, or both. Acts of harassment committed by supervisors, employers, or others
Read More
January 6, 2026
On December 30, 2025, Thailand’s Electronic Transactions Development Agency (ETDA) notified digital marketplace operators of a consolidated list of “high‑risk products” that are subject to strict monitoring on digital platforms. The list was jointly prepared by the Thai Industrial Standards Institute (TISI) and the Food and Drug Administration (FDA) to guide platform compliance in the initial phase of implementation of the Electronic Transaction Committee’s Notification on Other Measures for Marketplace for Goods with Specific Characteristics under Section 18(2) of the 2022 Royal Decree on Digital Platform Businesses Requiring Notification B.E.2568 (2025). The notice is addressed to operators of digital platform services that function as product marketplaces with specific characteristics laid out in the notification. The ETDA states that the TISI and the FDA are closely monitoring the high‑risk product categories on digital platforms, and the published list serves as the baseline reference for platform screening during the initial phase of the notification’s implementation. High‑Risk Product List The list aggregates categories of products that are illegal to sell online or are otherwise tightly regulated under Thai law, with an emphasis on health-related products, controlled substances, medical devices, and a wide range of industrial products that require certification or compliance with specified Thai Industrial Standards, as detailed below. Prohibited and tightly controlled health products. This includes all categories of modern medicines subject to control other than general household remedies; all categories of controlled herbal products except for over-the-counter herbal products; narcotics; psychotropic substances; and medical devices requiring use in medical facilities or a physician’s prescription. Selected industrial products requiring heightened controls. The list highlights dozens of TISI-regulated items commonly sold online. Examples include pacifiers, rice cookers, electrical wire, food wrap film, crayons, washing machines and dryers, air conditioners, electric cookers and air fryers, water heaters, microwave ovens, LED luminaires, hair dryers
Read More
January 5, 2026
On December 31, 2025, the government of Vietnam promulgated Decree No. 356/2025/ND-CP detailing and guiding the implementation of the new Personal Data Protection Law (PDPL) that was issued in June 2025. The new decree, like the PDPL, entered into force on January 1, 2026, with the previous Decree No. 13/2023/ND-CP on personal data protection ceasing effect on the same day. Some key points of the new decree include the following: Comprehensive lists of basic and sensitive personal data are provided, which will require companies to review again their existing documents and data type classification to ensure compliance. New timelines are established for responding to specific data subject requests. These timelines are more reasonable and longer than the previous 72-hour requirements. Additional consent guidelines are provided, prohibiting default consent or ambiguous instructions that confuse data subjects about giving or withholding consent. Mandatory content for data transfer agreements/clauses in particular cases is provided. This covers, among other things, (i) the legal basis for the transfer of personal data; (ii) responsibilities for personal data protection during the transfer and processing of personal data; (iii) responsibilities for ensuring the exercise of the rights of personal data subjects; and (iv) responsibilities for coordination and compliance of the parties in cases where violations of personal data protection regulations are detected. The qualifications and responsibilities of data protection officers (DPOs) and data protection departments include, among others, having been trained and fostered in legal knowledge and professional skills regarding personal data protection. There are no specific provisions governing the qualifications or requirements for organizations that provide data protection training or education. New mandatory templates and requirements are provided in relation to data processing impact assessment and data transfer impact assessment, and for cases in which companies need to re-submit assessments to the regulator. Stricter requirements are
Read More
December 30, 2025
On December 17, 2025, Laos’ Ministry of Industry and Commerce (MOIC) issued a notice introducing a new digital system that allows e-commerce businesses to obtain required certificates and licenses through an online, application-based platform. Notice No. 3988, which will take effect on February 1, 2026, introduces the E-Trust platform, a downloadable application that allows e-commerce businesses to remotely obtain acknowledgement certificates and business operating licenses. New Digital Registration Options Under the previous framework established by the Decree on E-commerce (2021), businesses were required to complete registration exclusively through paper-based submissions. The new system now offers businesses two registration options: Traditional paper-based process at the Division of E-commerce Management within the MOIC; or Electronic registration and renewal through the E-Trust platform. This change is expected to streamline procedures, reduce administrative burdens, and enhance accessibility for businesses operating outside Vientiane. The E-Trust platform facilitates compliance for both individuals and legal entities required to submit applications and renewals for required certificates and licenses. The development is particularly beneficial for businesses located in remote provinces, as it eliminates the need for physical travel and significantly accelerates processing times. Compliance Requirements and Penalties Businesses must obtain or renew the required certificates and licenses to avoid sanctions under the Decision on Fines and Other Measures for Violation of the Decree and Regulations on E-commerce (No. 2828/MOIC, dated November 11, 2025). Penalties for noncompliance may include monetary fines and other enforcement measures.
Read More