What happened
Vietnam's 2025 Law on Cybersecurity officially took effect on July 1, 2026, confirmed by Vietnam News Agency (VNA) and the official Vietnam.vn portal. The law consolidates and updates the 2018 Law on Cybersecurity and the 2015 Law on Cyberinformation Security. Key AI-relevant provisions: (1) strict prohibition and penalties on the creation and dissemination of AI-generated fake content and deepfakes; (2) mandatory digital platform obligations to verify and remove illegal AI-generated content; (3) enhanced e-KYC (digital identity verification) requirements; (4) strengthened data security measures; (5) personal criminal liability for platform operators who fail to act on illegal content removal orders.
Why it matters
Vietnam is a major digital market with a large user base for global platforms. The law imposes direct compliance obligations on cross-border digital service providers, including content moderation, identity verification, and rapid takedown of AI-generated fake content. Non-compliance risks enforcement actions, platform access restrictions, and criminal liability for executives. The law also signals a broader ASEAN trend toward hard law on AI-generated disinformation.
Action needed
Digital platforms and AI content services operating in Vietnam must immediately review content moderation pipelines for AI-generated/deepfake detection, ensure e-KYC processes are compliant, and establish a rapid-response mechanism for government takedown orders. Legal counsel should assess criminal liability exposure for local officers and representatives. Monitor implementing regulations for specific technical standards.