Vietnam retains strict data localization rules in new draft cybersecurity decree
( April 27, 2026, 07:27 GMT | Official Statement) -- MLex Summary: Vietnam’s Ministry of Public Security sent a new draft decree guiding the implementation of the cybersecurity law to the Ministry of Justice for assessment on Saturday. Compared with the previous version in February, the draft clarifies its application to Vietnamese and foreign entities in Vietnam, people of Vietnamese origin residing in Vietnam, and foreign entities participating in cybersecurity activities in the country. It removes provisions on state control of cross-border data transfers and technical requirements for data processing systems, but retains the rules for data localization and the establishment of legal representatives for foreign entities in specified cases. Telecommunications and internet service providers are required to provide users’ IP addresses and information — including their full name, citizen identification number, subscriber code, and registered address or phone number — to authorities upon request within 24 hours, or three hours in cases that affect national security. The decree is set to take affect on July 1.The draft decree is attached (in Vietnamese)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
Curated case files bringing together news, analysis and source documents in a single timeline