Currently, the Ministry of Public Security is leading the drafting of a Decree on administrative sanctions for violations in the fields of cybersecurity and personal data protection. The Draft Decree has been developed amid increasing cybersecurity risks, incidents, attacks, and personal data infringements in Viet Nam. Key points of the Draft Decree include:
(i) A broad scope of regulation and application, which is expected to have a significant impact on a wide range of entities in society, from the public sector to the private sector, as well as on most organizations and individuals participating in the cyber environment.
(ii) Regulation of seven groups of violations in the fields of cybersecurity and personal data protection, together with the corresponding penalties; violations not specifically addressed under the Draft Decree will remain subject to other applicable administrative sanctioning regulations.
(iii) Strengthened State oversight of existing violations, while introducing sanctions for conduct involving emerging technologies such as artificial intelligence and digital assets.
(iv) Detailed provisions on violations and corresponding sanctions in the field of personal data protection, including relatively stringent penalties and various mechanisms for determining the applicable level of fines.
