Cybercecurity law in Viet Nam

Vietnam has a comprehensive legal framework regarding information technology crimes. The Law No.
67/2006/QH11 on Information Technology, enacted on June 29, 2006, provides for information
technology application and development activities, measures to ensure information technology
application and development, and rights and obligations of agencies, organizations, and individuals
engaged in information technology application and development activities1.

This law applies to Vietnamese and foreign organizations and individuals engaged in information
technology application and development activities in Vietnam1. It also addresses cybersecurity, including
provisions on network security, information security, and cybercrime prevention2. It imposes criminal
penalties for offenses such as hacking, spreading viruses, and using IT to commit fraud2.

In addition to the Information Technology Law, Vietnam also has the 2018 Cybersecurity Law. This law
regulates that domestic and overseas service providers who carry out activities of
collecting/exploiting/analysing/processing certain types of data on telecom networks, internet and
value-added services in Vietnam’s cyberspace must store such data in Vietnam for a specified period of
time3. Moreover, such overseas service providers must have branches or representative offices
established in Vietnam3.

The Vietnamese Government issued Decree 53/2022/ND-CP on August 15, 2022, detailing a number of
articles of the 2018 Cybersecurity Law. This decree sets out the requirements for local data storage and
local presence requirements3. It came into effect from October 1, 20223.

Please note that this is a summary of the laws and for specific legal advice you should consult with a
legal professional.

-----------------

The 2018 Cybersecurity Law of Vietnam, also known as Law No. 24/2018/QH14, was promulgated by the
National Assembly of the Socialist Republic of Vietnam on June 12, 201812. This law regulates activities
of protecting national security and ensuring social order and safety in cyberspace12.

Here are some key provisions of the law:

Scope of Regulation: The law prescribes activities of protecting national security and ensuring social
order and safety in cyberspace2.
Cybersecurity: It defines cybersecurity as the assurance that activities in cyberspace do not harm
national security, social order and safety, and lawful rights and interests of agencies, organizations, and
individuals2.

Cybersecurity Protection: The law also defines cybersecurity protection as the prevention, detection,
stopping, and handling of acts of infringing upon cybersecurity2.