Vietnam

Measures regarding prohibited acts in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force. The Law applies to Vietnamese and foreign entities operating in the country, excluding AI used solely for defence, security, or cipher purposes. The Law introduces a risk-based classification system for AI systems. High-risk AI systems are those that may cause significant harm to life or health, infringe the legitimate rights and interests of individuals or organisations, or affect public interests or national security. Me...

Data protection regulation in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force, making data protection obligations enforceable. Article 7(3) prohibits any collection, processing, or use of data for artificial intelligence systems that violates data protection, intellectual property, or cybersecurity laws. Article 8(3) requires secure disclosure, connection, and sharing of data on the one-stop electronic portal on artificial intelligence and the national database on artificial intelligence systems, wit...

Cybersecurity regulation in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force, establishing cybersecurity-related obligations for organisations and individuals participating in artificial intelligence activities. When serious incidents occur with AI systems, developers and providers must promptly implement technical measures, including temporary suspension or recall, and notify competent authorities. Deployers and users are required to record incidents, report them in a timely manner, and assist in r...

Conformity assessment requirement for high-risk AI systems in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force. The Law requires high-risk AI systems to undergo conformity assessment before use and whenever significant changes occur. Systems must also comply with relevant standards or technical regulations. Conformity assessment confirms that a system meets the requirements of Articles 13 and 14 and is conducted either by registered or recognised conformity assessment organizations for listed high-risk systems, or by self-assessment...

Performance monitoring requirements in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force. Under Article 14, providers of high-risk systems must implement and maintain risk management measures, ensure the quality of training, testing, and operational data, and maintain technical dossiers and activity logs to support conformity assessment and post-use inspection. Systems must be designed to allow human supervision and intervention. Article 14 further requires deployers of high-risk systems to operate and supervis...

Testing requirements for AI systems in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force. The Law introduces a risk-based classification of AI systems into high, medium, and low-risk categories. Articles 8 and 21 establish a framework for AI testing and experimentation. The Government is required to establish an AI portal to serve as a digital platform for registering participation in controlled experimentation, receiving classification notifications, incident and periodic reports, and publicly disclosing infor...

Registration requirement in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force. The Law establishes a risk-based classification framework for AI systems, distinguishing between high-, medium-, and low-risk systems based on their potential impacts. High-risk AI systems are those that may cause significant harm to life or health, infringe legitimate rights and interests, or affect public interests or national security. Medium-risk systems are those that may mislead or manipulate users, particularly wher...

✓ ✓ OfficialConsumer Protectionmst.gov.vn ↗

Quality of service requirement in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force. The Law applies to Vietnamese and foreign entities operating in the country, excluding AI used solely for defence, security, or cipher purposes. It introduces a risk-based classification of AI systems into high, medium, and low-risk categories, with classification criteria to be set by the Government. The Law establishes quality of service requirements across the AI lifecycle. Article 4 sets out the basic principles govern...

Measures on use of AI in public sector in Law on Artificial Intelligence

On 1 March 2026, the Law on Artificial Intelligence enters into force. The Law applies to Vietnamese and foreign entities operating in the country, excluding AI used solely for defence, security, or cipher purposes. It introduces a risk-based classification system for AI, categorising AI systems as high, medium, or low risk, with detailed classification criteria to be determined by the Government. The Law addresses public procurement, ethical obligations, and the use of AI in the public secto...

Design requirements in Law on Digital Technology Industry

On 1 January 2026, the Law on Digital Technology Industry enters into force. The law sets out quality management principles and introduces a conformity assessment framework. The Ministry of Information and Communications (MIC) will issue ethical guidelines for the development, deployment, and application of artificial intelligence (AI). Additionally, digital technology products generated by AI must be clearly labelled in a machine-readable format to ensure they can be identified as artificial...

National Strategymic.gov.vn ↗

Artificial intelligence authority governance in Law on Digital Technology Industry

On 1 January 2026, the Law on Digital Technology Industry enters into force with a grace period. The law establishes the National Committee for the Promotion of the Digital Technology Industry as the organisation responsible for directing and coordinating the resolution of matters related to cooperation, investment, and the implementation of projects and programmes to promote the development of the digital technology industry. The law designates the Ministry of Information and Communications ...

Data protection regulation in Law on Digital Technology Industry

On 1 January 2026, the Law on Digital Technology Industry enters into force. The law differentiates between digital data input and output. Input digital data is collected, processed, and used directly to support the production activities and provision of digital technology services. Digital data output is generated during the activities of the digital technology industry. Input digital data must be non-personal data or data that has undergone de-personalisation or personal data compliant with...

Cross-border data transfer regulation in Law on Digital Technology Industry

On 1 January 2026, the Law on the Digital Technology Industry, including cross-border data transfer, enters into force. The law stipulates that the government is responsible for the uniform management of cross-border digital data transfers by sector. Organisations and individuals engaged in the digital technology industry in Vietnam are required to provide information on the aforementioned data transfers, with the exception of intermediaries that perform intermediary digital data activities w...

Prohibition of goods and services in Law on Digital Technology Industry

On 1 January 2026, the Digital Technology Industry Law enters into force. The law prohibits specific uses of AI, including systems that manipulate behaviour without users’ awareness, exploit vulnerabilities, or classify individuals based on inferred characteristics in ways that cause substantial harm. It also bans AI systems that indiscriminately create facial recognition databases, infer emotions in workplaces and educational settings (except for medical or safety purposes), or classify indi...

✓ ✓ OfficialNational Strategychinhphu.vn ↗

Cybersecurity regulation in Law on Personal Data Protection

On 1 January 2026, the Law on Personal Data Protection enters into force. The Law requires organisations to implement suitable technical and organisational measures to safeguard personal data against unauthorised access, disclosure or misuse (Articles 3, 14, 16, 18, 27). This encompasses the establishment of a dedicated data protection officer or department to provide oversight (Article 33), although small and medium-sized enterprises and startups may be temporarily exempt. In the event of a ...

01 JAN 2026 · Executive Order

Data protection regulation provisions in Implementing Regulations of Law on Personal Data Protection

On 1 January 2026, the Implementing Regulations of the Law on Personal Data Protection including data protection regulation entered into force. The Implementing Regulations further specify the regulatory requirements established by the framework of the Law on Personal Data Protection. Articles 3 and 4 specify the distinction between basic personal data and sensitive personal data, with the latter requiring stricter security and confidentiality. Article 5 sets out the procedures for data contr...

✓ ✓ OfficialNational Strategyluatvietnam.vn ↗

01 JAN 2026 · Executive Order

Cybersecurity requirement in Implementing Regulations of Law on Personal Data Protection

On 1 January 2026, the Implementing Regulations of the Law on Personal Data Protection including cybersecurity requirements entered into force. The Implementing Regulations further specify the regulatory requirements established by the framework of the Law on Personal Data Protection. Articles 8 through 12 specify cybersecurity requirements for entities operating in finance, big data, AI, blockchain, and cloud computing. These include encryption, anonymisation, breach notifications, transpare...

✓ ✓ OfficialNational Strategyluatvietnam.vn ↗

✓ ✓ OfficialNational Strategycongbao.chinhphu.vn ↗

Government access to data in Law No. 75/2025/QH15 amending and supplementing certain articles of the Law on Advertising

On 1 January 2026, Law No. 75/2025/QH15 enters into force, amending Article 23(5) of the Law on Advertising to introduce record-keeping and transparency obligations for online advertising service providers. Providers must store information and records relating to advertising activities and provide such information upon request by competent state authorities. Providers must also retain information concerning the rules governing advertising distribution methods and the advertising distribution ...

31 DEC 2025 · Other

National Competition Commission investigation into Zalo regarding data protection implications of service agreement

On 31 December 2025, the National Competition Commission announced an investigation into messaging service Zalo regarding the data protection implications of its new service agreement. The Commission sent a letter to the company VNG, which operates Zalo, requesting that it review and adjust the terms of its new service agreement to ensure that users are not made to consent to personal data processing as a condition of use, as well as ensuring that consumer consent to data collection is volunt...

National Strategyvcc.gov.vn ↗

14 NOV 2025 · Executive Order

Ministry of Science and Technology adopted Circular Promulgating the List of Key Digital Technology Products and Services (Circular No. 31/2025/TT-BKHCN)

On 14 November 2025, the Ministry of Science and Technology adopted Circular No. 31/2025/TT-BKHCN Promulgating the List of Key Digital Technology Products and Services, designating ten key digital product product and service groups that are eligible for special incentives under the Law on the Digital Technology Industry, such as tax incentives, state support, and preferential customs treatment. The ten key digital product and service groups are: (1) artificial intelligence, digital twins and vir

✓ ✓ OfficialGovernment Usemst.gov.vn ↗

12 NOV 2025 · Law / Act

Authorisation of goods or services in Law on Digital Transformation, 2025

On 11 December 2025, the National Assembly of Vietnam adopted the Law on Digital Transformation, which does not retain provisions from earlier drafts that required organisations and individuals to obtain conformity certification, declare conformity, or apply conformity marks before introducing products, goods, processes, or services serving digital transformation or connecting to information systems of state agencies. The adopted Law on Digital Transformation contains no Article 63 and no equ...

National Strategyduthaoonline.quochoi.vn ↗

12 NOV 2025 · Law / Act

Competition authority governance in Law on Digital Transformation, 2025

On 11 December 2025, the National Assembly of Vietnam adopted the Law on Digital Transformation. The adopted Law does not include provisions from earlier drafts that assigned the national competition authority responsibility for monitoring, evaluating, and handling violations by digital platforms holding a dominant market position under Article 40(1). These powers included monitoring abuse of dominant or monopolistic positions in digital services, data processing, goods distribution, and serv...

Competitionduthaoonline.quochoi.vn ↗

✓ ✓ OfficialConsumer Protectionduthaoonline.quochoi.vn ↗

Draft Law on Digital Transformation, 2025 including fair marketing and advertising practices was introduced to National Assembly

On 31 October 2025, the Law on Digital Transformation was introduced to the National Assembly of Vietnam. The Law on Digital Transformation applies to organisations and individuals directly involved in or related to digital transformation in Vietnam under Article 2. Provisions relevant to fair marketing and advertising practices are limited. Article 38(1) requires owners of digital systems and digital platforms to publicly and transparently disclose the code of conduct, terms and conditions of u

✓ ✓ OfficialGenerative AIduthaoonline.quochoi.vn ↗

Draft Law on Digital Transformation, 2025 including design requirements was introduced to National Assembly

On 31 October 2025, the Law on Digital Transformation was introduced to the National Assembly of Vietnam. The Law on Digital Transformation applies to domestic and foreign organisations and individuals directly involved in or related to digital transformation in Vietnam under Article 2. Article 7 sets out principles of digital system architecture and design, including the use of digital platforms and shared components under Article 7(1), efficient use of cloud computing infrastructure under Arti

✓ ✓ OfficialGenerative AIduthaoonline.quochoi.vn ↗

Draft Law on Digital Transformation, 2025 including performance monitoring requirements was introduced to National Assembly

On 31 October 2025, the Law on Digital Transformation was introduced to the National Assembly of Vietnam. The Law on Digital Transformation applies to domestic and foreign organisations and individuals directly involved in or related to digital transformation in Vietnam under Article 2. Article 4(1) includes activities to manage, statistically analyse, measure, monitor, and audit digital transformation activities and to evaluate their level and effectiveness. Article 8(5) requires digital system