Mandates foreign tech firms (cloud, social networks, OTT telecommunications) to store user data in Vietnam and establish branch offices upon police request.
Key national laws and regulations governing data privacy, cybersecurity, and tech operations in Vietnam — with direct links to primary legal texts.
| Legislation & Statute | Official Text |
|---|---|
Law on Cybersecurity (Law No. 24/2018/QH14) Foundational cybersecurity law requiring domestic and foreign tech firms collecting Vietnamese user data to store data locally and establish branch offices upon police directive. Data Localization & Surveillance | View Statute |
Decree No. 53/2022/ND-CP on Cybersecurity Law Implementation Specifies that foreign digital services (cloud, social media, e-commerce) served with non-compliance notices must store user data in Vietnam for at least 24 months and establish a local presence. Data Localization Enforcement | View Statute |
Decree No. 13/2023/ND-CP on Personal Data Protection Comprehensive personal data framework requiring data controllers to formulate Cross-Border Transfer Impact Assessments (TIA) and submit copies to the Ministry of Public Security within 60 days. Data Governance & Flows | View Statute |
Law on Intellectual Property (Amended 2022) Implemented obligations under CPTPP and EVFTA regarding ISP safe harbors and digital copyright protection, introducing statutory notice-and-takedown conditions. Copyright & Intermediary Liability | View Statute |
Evaluating the economic gains of digital trade alignment against regulatory sovereignty and domestic policy space for Vietnam.
Managed dualism balancing aggressive electronics supply chain integration with rigid state data security and localization controls.
Vietnam pursues external supply-chain integration while maintaining internal data sovereignty through discretionary enforcement notices, utilizing RCEP exceptions to mitigate trade dispute exposure.
Digital trade facilitation assures multinational electronics giants (Samsung, Intel, Foxconn) of frictionless supply chain telemetry and paperless customs transit.
Vietnam's offshore software engineering sector (FPT, Viettel, VNG) benefits from standardized regional data corridors and digital signature recognition.
With 78%+ internet penetration and rapid retail digitization, interoperable payments under DEFA link Vietnamese consumers and vendors to ASEAN market demand.
Compulsory domestic data storage under Decree 53 and transfer impact assessment (TIA) filings under Decree 13 conflict with international open transfer commitments.
The expiration of Vietnam's 5-year transitional immunity under CPTPP Articles 14.11 and 14.13 leaves its data localization decrees exposed to state-to-state dispute settlement.
Full market access for foreign hyperscalers risks crowding out state-backed domestic cloud infrastructure providers (Viettel Cloud, VNPT) before achieving global scale.
How Vietnam's domestic laws align or conflict with 5 major digital trade agreements (DEFA, RCEP, CPTPP, IPEF, and Bilaterals).
Comparing international trade agreements against national laws and digital rights in Vietnam.
Participating in trade secret protections while retaining regulatory audit discretion.
Protects proprietary algorithmic assets against arbitrary state appropriation.
Subject to ministerial investigation powers in consumer protection and criminal probes.
Preserves state discovery authority, but lacks transparent due process safeguards for proprietary audits.
Participating in notice-and-takedown safe harbor harmonization across regional platforms.
Establishes legal certainty for digital intermediaries hosting user-generated content.
Harmonized with domestic copyright statutes and sectoral telecommunications regulations.
Safeguards conduits from arbitrary intermediary liability, supporting open internet communications.
Standard TRIPS baseline patent protection with compulsory licensing flexibilities.
Standard intellectual property protections aligned with WTO TRIPS baselines.
Preserves domestic authority to issue compulsory licenses during public health crises.
Protects sovereign public health flexibility to manufacture and import affordable generic medicine.
Endorsed ASEAN Guide on AI Ethics; developing national non-binding advisory circulars.
Chapter establishes voluntary safety baselines, ethical governance, and sandbox collaboration.
Domestic binding legislation remains absent; circulars provide non-enforceable guidance.
Zero statutory protection against automated bias, algorithmic worker dispatch, or deceptive AI.
Defending Decree 53 onshore data storage and Decree 13 mandatory TIA dossiers submitted to A05.
Requires free cross-border data flows with non-discrimination standards.
Direct collision with Cybersecurity Law Decree 53/2022/ND-CP and PDPD Decree 13/2023.
Tension between domestic state surveillance mandates and international commercial data transfers.
Statutory risk levels are determined strictly by enacted domestic legislation, multilateral treaty commitments, and procedural safeguards rather than arbitrary numerical scores.
Digital trade agreements Vietnam is negotiating or party to — tracking national positions, ratification progress, reservations, and negotiation timelines.
Active member state in 9-chapter DEFA negotiations. National delegation participating in SEOM text scrubbing ahead of planned November 2026 signing ceremony.
Provisional reservations filed on Chapter 2 (Data Flows); scrubbing ongoing
11 countries sign the Comprehensive and Progressive Agreement for Trans-Pacific Partnership. ASEAN signatories: Brunei, Malaysia, Singapore, Vietnam.
Formally ratified by national parliament
Vietnam deposits ratification instrument. CPTPP enters into force for Vietnam, extending digital trade chapter obligations.
Formally ratified by national parliament
US-led Indo-Pacific Economic Framework launched. ASEAN participants: Brunei, Indonesia, Malaysia, Philippines, Singapore, Thailand, Vietnam. Digital economy pillar included.
Formally ratified by national parliament
IPEF partners reach substantial conclusion on digital economy pillar covering data flows, AI governance, and online consumer protections.
Formally ratified by national parliament
Recent regulatory developments, investigations, and reporting tagged to Vietnam or regional ASEAN impact.
No dispatches or investigative reports currently tagged for Vietnam.
