On August 15, 2022, the Government of Vietnam issued
Decree No. 53/2022/ND-CP, which specifies various provisions of the
Vietnam Cybersecurity Law.
For many years, Decree 53 has been drafted, amended, and
awaiting to be implemented. Without this decree, Vietnamese
authorities would not be able to enforce the entire Cybersecurity
Law, particularly the provisions of this Law related to data
localization in Article 26 of the law (establish a local office in
Vietnam and store specific types of data, such as user data or
personal data or set up a branch or representative office in
Vietnam).
On October 1, 2022, this Decree will go into effect.
Significant provisions of Decree 53
Article 26 of the Cybersecurity Law's provisions for data
localization and branch offices: In accordance with Decree 53,
certain data types must be localized, as well as the companies that
must adhere to the regulations trigger conditions, the required
data retention periods, the duration of
