Vietnam Enacts New Cybersecurity Regulations for Businesses

• •Vietnam's new decree mandates user verification for digital accounts.
• •Businesses must provide user information to authorities within 24 hours.
• •Repeated violations can result in account restrictions or suspensions.

On August 19, 2026, Vietnam issued a decree establishing new cybersecurity rules for both domestic and foreign businesses operating in its cyberspace. The decree includes 32 articles detailing requirements for information security assurance, user verification, and account authentication methods, particularly for digital services. Businesses must verify user information during account registration and authenticate accounts using a Vietnamese mobile phone number or personal identification number. They are also required to provide user data to cybersecurity authorities within 24 hours of a valid request, with a reduced timeframe of three hours for emergencies. Failure to comply with these regulations can lead to account restrictions or suspensions, especially for repeated violations. The rules aim to enhance cybersecurity measures and protect users' information across telecommunications and internet services in Vietnam.