Vietnam implements new cybersecurity and data protection decrees

cybersecurity law personal data protection account verification administrative penalties deepfake regulation

The Vietnamese Government has issued two significant decrees, No. 333/2026/NĐ-CP and No. 330/2026/NĐ-CP, effective August 19, 2026, to implement the Law on Cybersecurity and strengthen personal data protection.

Decree 333/2026/NĐ-CP mandates that businesses providing telecommunications or internet services must verify user identities at the time of registration using a Vietnamese mobile number or legal electronic identification. Notably, users conducting commercial livestreaming must verify their accounts using personal identification numbers. The decree also establishes strict measures for social media accounts, including indefinite suspension for those posting information that infringes on national security or for repeat offenders.

Decree 330/2026/NĐ-CP introduces administrative penalties for cybersecurity and data protection violations. Fines for unauthorized collection or processing of personal data can reach 70 million VND. Additionally, sending unsolicited advertising via email, text, or phone calls can result in fines of 10-20 million VND for individuals and up to 40 million VND for organizations.

Authorities have also issued warnings regarding the misuse of AI and deepfake technology for impersonation and fraud. Citizens are cautioned that sharing high-resolution biometric data, such as facial images and fingerprints, on social media can expose them to identity theft and unauthorized access to financial accounts.

Entities

Government of Vietnam · Ministry of Public Security · Vietnam · Vietnam Social Security

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] Users utilizing livestreaming features for commercial purposes are required to verify their accounts using personal identification numbers. doanhnghiephoinhap.vn
[DISPUTED] The Government issued Decree No. 333/2026/NĐ-CP on August 19, 2026, detailing the implementation of the Law on Cybersecurity. doanhnghiephoinhap.vn · genk.vn · baohatinh.vn
[○ 1 SOURCE] Businesses providing services on telecommunications or Internet networks in Vietnam must verify user information at the time of account registration. doanhnghiephoinhap.vn
[○ 1 SOURCE] Account verification must be conducted using a Vietnamese mobile phone number or a legal personal identification method. doanhnghiephoinhap.vn
[DISPUTED] The Government issued Decree No. 330/2026/NĐ-CP on August 19, 2026, regarding administrative penalties for cybersecurity and personal data protection. baophutho.vn · mekongasean.vn · kinhdoanhvaphattrien.vn · sohuutritue.net.vn · kenh14.vn
[● 2 SOURCES] Unauthorized collection or processing of personal data without explicit consent can result in fines of up to 70 million VND. mekongasean.vn · kinhdoanhvaphattrien.vn
[● 3 SOURCES] Accounts used to post information infringing on national security may be subject to indefinite account suspension. genk.vn · baohatinh.vn
[● 2 SOURCES] Individuals may be fined 10-20 million VND for sending advertising emails or messages without consent, while organizations face double that amount. sohuutritue.net.vn · kenh14.vn