Years after the promulgation of the Law on Cybersecurity, the long-awaited decree implementing Law on Cybersecurity has finally been introduced. On 15 August 2022, the Vietnamese Government officially issued Decree 53/2022/ND-CP detailing a number of articles of the Law on Cybersecurity (Decree 53).

Decree 53 has undergone a comprehensive development process from initial drafting, revising, pending to official issuance. Decree 53 is comprised of 30 articles divided into 6 chapters. It is expected to play a significant role in clarifying the implementation and compliance procedures of the Law on Cybersecurity when it enters to force on 1 October 2022.

Notably, Decree 53 shreds light on some of the hotly debated requirements under the Law on Cybersecurity which are data localisation and local presence requirements. Similar to the Law on Cybersecurity, the scope of application under Decree 53 is extended to not only local entities but also foreign entities.

In this legal update, we will highlight some major points under Decree 53 that, from our point of view, service providers in cyberspace should stay alert on.