Vietnam: Ministry of Science and Technology opened consultation on Decree No. 2026/ND-CP implementing Law on Artificial Intelligence including data protection requirements

On 9 February 2026, the Ministry of Science and Technology opened a consultation on Decree No. 2026/ND-CP implementing the Law on AI. Article 38 requires agencies and individuals managing or using AI infrastructure and data to apply technical and management measures ensuring confidentiality, integrity, and availability of infrastructure and data. Incident notification obligations related to personal data, cybersecurity, and cyber information security follow existing laws on data protection and cybersecurity. Cybersecurity requirements in Article 38 do not create new obligations to disclose data unless otherwise provided for by law. The Decree also creates the National Database on Artificial Intelligence to support state management, research, and testing. The Database organises data into open data, conditionally open data, and commercial data accessible through agreements or licensing (Article 36).