Vietnam issues new cybersecurity regulations and personnel incentives

The Vietnamese government has issued several new decrees to strengthen national cybersecurity and regulate digital activities.

Under Decree No. 327/2026/ND-CP, domestic and foreign businesses providing telecommunications, Internet, and value-added services must implement strict information security measures. This includes mandatory electronic identification and authentication for users. For commercial livestreaming, personal identification numbers are required. Service providers must also comply with data retention laws and provide user information to the Ministry of Public Security within 24 hours of a request, or within three hours during national security emergencies.

Additionally, Decree No. 329/2026/ND-CP establishes a framework for cybersecurity forces, categorized into specialized, standing, and reserve units. To attract talent, the decree introduces significant financial incentives for specialized personnel. Depending on the complexity and strategic importance of their work—such as combating cyber warfare or developing strategic technologies—personnel may receive monthly salary supplements of up to 100%, 200%, or 300%.

Other regulations detail the conditions for businesses to trade cybersecurity products and services, including hardware and software designed for vulnerability scanning and risk assessment. The Ministry of Public Security and the Ministry of National Defence will share management responsibilities for cybersecurity tasks.