Industrial Policy & Trade Monitor· 2666 actions· ✨ 90 recent

Vietnam's National Assembly passed Law on Cybersecurity No. 116/2025/QH15 on 10 December 2025 (434 of 443 deputies in favour), effective 1 July 2026. The law supersedes both the 2018 Cybersecurity Law (Law 24/2018/QH14) and the 2015 Law on Cyber Information Security, consolidating cybersecurity, cyber-information-security, and network-information-security into a unified Ministry of Public Security-led framework. It retains data-localization obligations for foreign digital-service providers handling personal data, user-generated content, and relationship graphs of Vietnamese users (minimum 24-month retention), introduces 6-hour urgent / 24-hour standard content take-down windows on MPS request, expressly prohibits AI/deepfake forgery of images, voices, and videos for illegal purposes, and mandates child-safety platform measures.

On 10 October 2025 Vietnam's Government issued Decree No. 259/2025/NĐ-CP, establishing the country's first comprehensive statutory framework for strategic trade control — covering the export, temporary import for re-export, transshipment, transit, and cross-border trade of strategic goods defined as: (a) WMD-related items, (b) conventional weapons, and (c) dual-use goods spanning nuclear, electronics, telecommunications, sensors, aviation, maritime, aerospace, biochemical, metals, and chemical categories. The decree creates a Ministry of Industry and Trade (MoIT) licensing regime with an ICP (Internal Compliance Programme) fast-track for certified exporters of two or more years' standing, and includes catch-all provisions requiring licensing even for unlisted goods where WMD end-use or a designated end-user is suspected. Structurally, the decree represents Vietnam's transition from ad-hoc export-management provisions under legacy Decree 69/2018/NĐ-CP to a unified strategic-trade-control architecture analytically aligned with the Wassenaar Arrangement, Australia Group, Nuclear Suppliers Group, and MTCR control-list architecture. It positions Vietnam as a compliant strategic-goods manufacturing hub within the US-led friend-shoring supply chain, directly preceding the US announcement in February 2026 of Vietnam's removal from EAR Country Groups D:1–D:3.

On 22 December 2024 the Politburo of the Communist Party of Vietnam, under General Secretary Tô Lâm, issued Resolution 57-NQ/TW designating science, technology, innovation, and national digital transformation as Vietnam's "top strategic breakthrough" through 2030 with vision to 2045. The resolution targets ≥50% digital-economy share of GDP, top-30 global ranking in innovation and digital transformation, and at least 10 globally-competitive Vietnamese digital-technology enterprises by 2030. It identifies data, AI, blockchain, and IoT as priority bottlenecks and operates as the parent/umbrella authority under which all subsequent Government, National Assembly, Prime-Ministerial and Ministerial tech-industrial instruments are formulated. Operational implementation runs through Government Resolution 03/NQ-CP of 9 January 2025 (action programme).

Government Decree 53/2022/ND-CP, signed 15 August 2022 and effective 1 October 2022, implements Article 26 of Vietnam's 2018 Law on Cybersecurity. It mandates in-country storage of three categories of data — personal data of users in Vietnam, user-generated data, and user-relationship data — for both domestic and foreign cyberspace- service providers, with a minimum 24-month retention period. Foreign enterprises providing telecoms, data storage, domain names, e-commerce, online payments, social networks, online video games, or messaging services to users in Vietnam must establish a Vietnamese branch or representative office within 12 months of a Minister of Public Security written request. The decree closes a four-year implementation gap on the 2018 Cybersecurity Law and is the principal Vietnamese digital-trade barrier alongside Decree 13/2023/ND-CP (Personal Data Protection).