Vietnam: Implemented Decree 147/2024/ND-CP on the management, provision and use of internet services and online information including data localisation requirements

On 25 December 2024, Decree 147/2024/ND-CP on the management, provision and use of internet services and online information enters into force. The Decree applies to domestic and foreign organisations and individuals directly engaged in or related to the management, provision and use of internet services, online information, and online games, and ensuring information safety and security. The Decree requires that general electronic information websites and social networks must store user data on servers with Internet Protocol (IP) addresses in Vietnam. It also requires that they have at least one server located in Vietnam for inspection and data provision. Further, general websites need to store content for 90 days and processing logs for two years. It also requires that social networks must store user account information, login times, IP addresses, and activity logs for two years. The Decree mandates that data must be deleted after the storage period expires and that systems must ensure safe operation and comply with local regulations for data access and storage.