Decree 53: Implementing The Law On Cybersecurity

The Law on Cybersecurity (LOC) was adopted and came into force on 1 January 2019, but some provisions of the implementation were not yet clear. After more than three years, the Government issued Decree No. 53/2022/ND-CP; providing detailed guidance for certain articles of the LOC (Decree 53). Decree 53 will come into effect on 1 October 2022.

In this update, we summarise some of the main points.

1. Definition of Localised Data

Prior to Decree 53, the LOC required domestic and overseas entities to store certain data in Vietnam if it was related to telecommunication networks, internet and value-added services in Vietnam's cyberspace. It would apply if entities collect, exploit, analyse or process: