# Vietnam data governance and cybersecurity regulation

> Live situation record from CLSTR: https://clstr.news/situations/vietnam-data-governance-and-cybersecurity-regulation
> Updated: 2026-09-11T01:41:00.000Z. Sources: 22. Developments: 6.

Vietnam is advancing its digital regulatory landscape through new enforcement and capacity-building measures. Following the implementation of the Personal Data Protection Law on January 1, 2026, the Ministry of Public Security drafted a decree to establish administrative sanctions for cybersecurity and data protection violations. These proposed penalties include fines up to 10 times the illegal revenue for unauthorized data sales and up to 3 billion VND for other violations, aiming to strengthen digital sovereignty. To support these legal frameworks, the Prime Minister issued Decision No. 1555/QD-TTg, which creates a national training and development framework for data governance. 

Recent regulatory actions have moved from drafts to formal decrees. Decree No. 330/2026/NĐ-CP, effective August 19, 2026, establishes administrative penalties for cybersecurity and personal data violations, applying to both domestic and foreign entities. Decree No. 333/2026/NĐ-CP, also effective August 19, 2026, mandates identity verification for telecommunications and internet service users and requires commercial livestreamers to verify accounts. Expanding its digital control, the government issued Decree 328/2026/NĐ-CP, effective October 5, 2026, to combat fake news. This decree integrates the VNeID electronic identification application, allowing citizens to report misinformation directly. 

Complementing these measures, Circular 126/2026/TT-BTC, effective September 1, 2026, requires individuals and organizations to pay actual costs for printing, copying, or photographing requested information. Concurrently, authorities are intensifying proactive information management through Steering Committee 35. This strategy focuses on providing timely, accurate, and official information to fill gaps and prevent the spread of false narratives on social media, aiming to clarify misunderstandings before they escalate.

## Claims

- The Government issued Decree No. 330/2026/NĐ-CP on August 19, 2026, regarding administrative penalties for cybersecurity and personal data protection. (disputed by 5 sources)
- The Government issued Decree No. 333/2026/NĐ-CP on August 19, 2026, detailing the implementation of the Law on Cybersecurity. (disputed by 4 sources)
- Accounts used to post information infringing on national security may be subject to indefinite account suspension. (corroborated by 3 sources)
- Unauthorized collection or processing of personal data without explicit consent can result in fines of up to 70 million VND. (corroborated by 2 sources)
- Individuals may be fined 10-20 million VND for sending advertising emails or messages without consent, while organizations face double that amount. (corroborated by 2 sources)
- Businesses providing services on telecommunications or Internet networks in Vietnam must verify user information at the time of account registration. (single source)
- Account verification must be conducted using a Vietnamese mobile phone number or a legal personal identification method. (single source)
- Users utilizing livestreaming features for commercial purposes are required to verify their accounts using personal identification numbers. (single source)

## Timeline

### 2026-09-11: Vietnam strengthens digital defense against misinformation

Vietnam is enhancing its digital strategy to combat misinformation by proactively providing official information and using visual content to prevent the rapid spread of unverified rumors on social media.

2 sources. https://clstr.news/cluster/vietnam-strengthens-digital-defense-against-misinformation

### 2026-08-28: Vietnam introduces new regulations on information access and fake news prevention

Vietnam will implement new regulations on September 1 and October 5, 2026, regarding information access fees and the use of VNeID to report fake news and misinformation.

6 sources. https://clstr.news/cluster/vietnam-introduces-new-regulations-on-information-access-and-fake-news-prevention

### 2026-08-23: Vietnam implements new decree to combat fake news

Vietnam's Decree 328/2026/NĐ-CP, effective October 5, 2026, empowers the Ministry of Public Security to combat fake news by labeling verified false information and regulating digital service providers.

4 sources. https://clstr.news/cluster/vietnam-implements-new-decree-to-combat-fake-news

### 2026-08-23: Vietnam implements new cybersecurity and data protection decrees

Vietnam has implemented new cybersecurity and data protection decrees, mandating user verification for internet services and imposing fines up to 70 million VND for data violations.

12 sources. https://clstr.news/cluster/vietnam-issues-new-decrees-on-cybersecurity-and-data-protection

### 2026-08-13: Vietnam issues national data governance training framework

Vietnam has issued a national training framework for data governance to standardize competencies for officials and support the country's digital government and digital economy initiatives.

3 sources. https://clstr.news/cluster/vietnam-issues-national-data-governance-training-framework

### 2026-08-08: Vietnam drafts cybersecurity and personal data protection sanctions

Vietnam's Ministry of Public Security has drafted a decree to impose heavy administrative sanctions for cybersecurity and personal data protection violations to enforce the 2025 PDPL.

4 sources. https://clstr.news/cluster/vietnam-strengthens-legal-defenses-to-combat-cyber-threats-and-protect-data

---
Cite as: Vietnam data governance and cybersecurity regulation. CLSTR, https://clstr.news/situations/vietnam-data-governance-and-cybersecurity-regulation
