Vietnam has taken another significant step in strengthening its cybersecurity framework. The Government has issued three new decrees implementing the 2025 Cybersecurity Law, introducing new licensing requirements for cybersecurity and civil cryptography businesses, more detailed data localisation rules and stronger obligations for online platforms.
The three decrees are:
- Decree No. 332/2026/ND-CP on the business of cybersecurity products and services (“Decree 332”);
- Decree No. 333/2026/ND-CP detailing certain provisions and implementation measures under the Cybersecurity Law (“Decree 333”); and
- Decree No. 341/2026/ND-CP on civil cryptography activities (“Decree 341”).
Decrees 332 and 333 took effect on 19 August 2026, while Decree 341 took effect on 1 September 2026. Together, these decrees move Vietnam’s cybersecurity regime from broad statutory principles towards a more detailed and operational framework.
For more information on new decree, please visit DFDL website.
