Vietnam: Adopted Decree 147/2024/ND-CP on the management, provision and use of internet services and online information including data localisation requirements

On 9 November 2024, the Vietnamese Government adopted Decree 147/2024/ND-CP on the management, provision and use of internet services and online information. The Decree applies to domestic and foreign organisations and individuals directly engaged in or related to the management, provision and use of internet services, online information, and online games, and ensuring information safety and security. The Decree requires that general electronic information websites and social networks must store user data on servers with Internet Protocol (IP) addresses in Vietnam. It also requires that they have at least one server located in Vietnam for inspection and data provision. Further, general websites need to store content for 90 days and processing logs for two years. It also requires that social networks store user account information, login times, IP addresses, and activity logs for two years. The Decree mandates that data must be deleted after the storage period expires and that systems must ensure safe operation and comply with local regulations for data access and storage.