Decree 53 guiding Cybersecurity Law

08 September, 2022

The 2018 Cybersecurity Law regulated (in Article 26.3) that domestic and overseas service providers who carry out activities of collecting/exploiting/analysing/processing certain types of data on telecom networks, internet and value-added services in Vietnam’s cyberspace must store such data in Vietnam for a specified period of time. Moreover, such overseas service providers must have branches or representative offices (RO) established in Vietnam.

On 15 August 2022, the Vietnamese Government issued Decree 53/2022/ND-CP detailing a number of articles of the 2018 Cybersecurity Law, and which sets out the requirements for such local data storage and local presence requirements. Decree 53 comes into effect from 1 October 2022.