vnlawfind

Sharing Knowledge - Inspiring Passion - Promoting Jurisprudence

CORPORATE & INVESTMENT, LEGAL NEWSLETTERS

Some notes on the draft Decree on administrative sanctions for violations in cybersecurity and personal data protection

Luu Tue Dang - 09/06/2026

Currently, the Ministry of Public Security is leading the drafting of a Decree on administrative sanctions for violations in the fields of cybersecurity and personal data protection. The Draft Decree has been developed amid increasing cybersecurity risks, incidents, attacks, and personal data infringements in Viet Nam. Key points of the Draft Decree include:

(i) A broad scope of regulation and application, which is expected to have a significant impact on a wide range of entities in society, from the public sector to the private sector, as well as on most organizations and individuals participating in the cyber environment.
(ii) Regulation of seven groups of violations in the fields of cybersecurity and personal data protection, together with the corresponding penalties; violations not specifically addressed under the Draft Decree will remain subject to other applicable administrative sanctioning regulations.
(iii) Strengthened State oversight of existing violations, while introducing sanctions for conduct involving emerging technologies such as artificial intelligence and digital assets.
(iv) Detailed provisions on violations and corresponding sanctions in the field of personal data protection, including relatively stringent penalties and various mechanisms for determining the applicable level of fines.

Some notes on the draft Decree on administrative sanctions for violations in cybersecurity and personal data protection
Some notes on the draft Decree on administrative sanctions for violations in cybersecurity and personal data protection
Size: 1 MB

Download link

English (pdf, 1 MB)

Leave a comment