Vietnam: Government adopted Decree No. 165/2025/ND-CP detailing a number of articles and measures to implement the Data Law (No. 60/2024/QH15), including data protection regulation

On 30 June 2025, the Vietnamese government issued Decree No. 165/2025/ND-CP, which provides detailed regulations and measures for implementing the Data Law (No. 60/2024/QH15). The Decree defines critical data and core data based on their potential impact on national security, sovereignty, macroeconomic stability, public health, and social order, with core data posing direct threats if misused. It mandates strict protocols for data storage, requiring owners to specify retention periods and state agencies to establish secure technical procedures, while the National Data Centre provides storage services with coordinated implementation plans. Data access and retrieval are governed by legal compliance, minimal privilege principles, and technical controls, including logging and authentication. Encryption and decryption measures must align with national standards, with authorities empowered to bypass consent in specific security-related cases. For cross-border data transfers, the Decree requires risk assessments, contractual safeguards, and mandatory approvals for core data, while critical data transfers necessitate post-transfer notifications. Data owners must ensure data integrity through validation, updates, and secure deletion protocols, with additional safeguards for data sharing with state agencies, including infrastructure support and cost compensation. The National Data Centre oversees data interoperability, quality assurance, and public open data disclosure via national and sectoral portals, ensuring transparency while restricting sensitive data. Compliance includes annual risk assessments, incident reporting, and personnel training, with enforcement mechanisms for violations. The Decree also establishes the National Data Centre’s role in infrastructure, cloud computing, and analytics, alongside its authority to coordinate international data cooperation and standardise technical frameworks for data governance across Vietnam’s public and private sectors.