Vietnam: Cyber Security Law, including operational license requirement was introduced to National Assembly

On 31 October 2025, the Cyber Security Law, including the operational license requirement, was introduced to the National Assembly. The law requires organisations to obtain a government licence to trade in cybersecurity products and services, with most products and services falling under a general category with shared licensing requirements. These include consultancy, monitoring, incident response, data recovery, cyber-attack prevention, inspection tools, surveillance products, and anti-intrusion systems. To qualify for a licence, companies must align with national cybersecurity strategies, have adequate infrastructure, and employ qualified managerial and technical personnel.