Vietnam issues new decrees on data privacy and information access

The Vietnamese government has issued several new decrees to regulate cybersecurity, data protection, and information access. Decree 330/2026/NĐ-CP, effective August 19, establishes strict penalties for violating personal data privacy. Individuals who publicly expose others' personal information online (often referred to as ‘bóc phốt’) face fines of up to 25 million VND, while organizations may be fined between 30 and 50 million VND. The decree also targets spam, with penalties of up to 50 million VND for making advertising calls outside permitted hours or sending excessive messages without consent.

Additionally, Decree 337/2026/NĐ-CP focuses on ensuring the right to access information. It mandates technical infrastructure investments and digital applications to assist vulnerable groups, including people with disabilities, ethnic minorities, and residents in remote or economically disadvantaged areas. This includes maintaining digital portals and providing specialized assistive technologies to facilitate information retrieval.