Overview
Vietnam is rapidly developing a comprehensive and multi-layered approach to Artificial Intelligence (AI) regulation, characterized by a strategic vision to become a regional AI innovation hub by 2030 while ensuring responsible and human-centric development. This approach balances the promotion of innovation and economic growth with robust risk management, ethical considerations, and the safeguarding of national security and digital sovereignty. The regulatory landscape is evolving from foundational strategies and guidelines to more concrete, binding legislation, reflecting a proactive stance in shaping the future of AI governance. The country's AI regulatory philosophy is deeply rooted in the principle of "putting people at the center," stipulating that AI systems must serve humanity and remain subject to human oversight, particularly in critical decision-making processes. This human-centric orientation is complemented by a focus on national autonomy, aiming to strengthen self-reliance in AI technology, infrastructure, and data. Vietnam's legislative efforts, such as the Law on Artificial Intelligence (2025) and the Law on Digital Technology Industry (2025), are designed to create a predictable yet flexible regulatory environment that encourages investment and technological advancement while addressing potential societal and ethical challenges.
Regulatory approach
Vietnam's regulatory approach to AI is characterized by a blend of horizontal and sectoral measures, increasingly moving towards binding legislation while retaining flexible, soft law instruments. A core feature is the adoption of a risk-based management approach, classifying AI systems based on their potential impact and danger. This tiered regulatory model dictates the level of scrutiny and compliance obligations for AI providers and deployers, ensuring that innovation is not unduly hindered while prioritizing safety and accountability, particularly for high-risk applications. This risk-based framework is designed to be adaptive, avoiding rigid classifications that could quickly become outdated in the face of rapid technological advancements. The regulatory philosophy emphasizes regulating the outputs and usage behaviors of AI systems rather than deeply interfering with the internal algorithmic models of businesses, thereby limiting obstacles to innovation and encouraging startups. Alongside binding laws, Vietnam utilizes strategic policies and guidelines, such as the National Strategy on Research, Development and Application of Artificial Intelligence until 2030 and the Principles on Research and Development of Responsible AI Systems, to provide overarching direction and ethical considerations for the AI ecosystem. AI governance in Vietnam is primarily centralized under the Government, with the Ministry of Science and Technology (MOST) playing a central and expanding role. As of February 2025, the Ministry of Information and Communications (MIC) merged with MOST, consolidating responsibilities for science, technology, innovation, and digital transformation, including AI. MOST is tasked with primary responsibility for drafting decrees, circulars, and technical guidelines, proposing national programs for digital technology industry development, and coordinating R&D, standards, and industrial policy. The Law on Artificial Intelligence (2025) further centralizes AI oversight under the Government, led by MOST. It is expected that MOST will be the primary regulatory contact for registration, approval processes, standards development, and compliance matters related to AI. The Politburo, through Resolution No. 57-NQ/TW, mandates the creation of a Central Steering Committee on science, technology, innovation, and digital transformation, chaired by the General Secretary of the Party Central Committee, to provide high-level direction and coordination across Party and State bodies. Other key bodies include the Ministry of Public Security (MPS), which is the primary authority for cybersecurity enforcement and oversight, particularly concerning data localization and national security aspects of AI systems. The Ministry of Finance is tasked with drafting rules regulating digital assets and tax/incentive treatment under the Law on Digital Technology Industry. Provincial and municipal People's Committees, such as those in Da Nang and Hanoi, are responsible for local implementation of national strategies and for developing their own smart city initiatives that integrate AI. The National Assembly plays a crucial role as the unicameral parliament and highest organ of state power, responsible for adopting and amending laws, including those pertaining to AI.
Enforcement & penalties
While specific penalty ranges for violations of the new Law on Artificial Intelligence (2025) are expected to be detailed in forthcoming guiding decrees and circulars, the existing regulatory framework provides insight into Vietnam's enforcement mechanisms. The Law on Digital Technology Industry (2025) establishes monitoring, market surveillance, administrative penalties, and escalation to criminal referral for serious violations within the digital technology industry, including AI. This indicates a structured approach to ensuring compliance across the AI lifecycle. For cybersecurity and data protection, the Cybersecurity Law (2018) empowers the Ministry of Public Security to monitor compliance through inspections and audits. Service providers are required to submit periodic reports on their cybersecurity status and incident response activities, and authorities can conduct inspections of information systems and request access to data for security purposes. Mandatory cybersecurity incident reporting is in place for significant threats to national security or public order. The new Law on Artificial Intelligence is expected to include provisions for conformity assessments, registration procedures for high-risk AI systems, and ongoing compliance monitoring, with a phased implementation schedule to allow businesses to adapt.
Data protection
Vietnam's data protection framework is primarily anchored by the Cybersecurity Law (2018) and its implementing decrees, notably Decree 13/2023/ND-CP on personal data protection. The Cybersecurity Law is significant for its controversial data localization provisions under Article 26.3, which mandate domestic and foreign companies providing certain online services in Vietnam to store specified categories of data, including personal data of Vietnamese service users, locally for a minimum of 24 months upon request from authorities. This requirement has substantial implications for AI systems that process such data, necessitating compliance with local storage and security standards. Decree 13/2023/ND-CP further clarifies the scope and application of these data storage obligations and aligns with global data protection standards, such as the EU's GDPR, to ensure privacy and data rights in AI development. Additionally, Vietnam has passed Law No. 60/2024/QH15 on Data, scheduled to take effect on July 1, 2025, which regulates data processing more broadly and introduces concepts like "digital data," "important data," and "core data." This evolving framework aims to ensure robust protection of personal data and digital sovereignty, requiring AI developers and deployers to adhere to strict standards for data handling, consent, and data subject rights.
Sector-specific rules
While Vietnam's AI regulatory framework is largely horizontal, applying broadly across industries, several initiatives and laws indicate an emerging focus on sector-specific applications and considerations. The Law on Digital Technology Industry (2025) creates a dedicated legal regime covering various digital technologies, including AI, semiconductors, and digital assets, indicating a sectoral approach to promoting and regulating these specific high-tech industries. This law sets out conformity and quality requirements for certain digital technology products and services, cybersecurity and safety obligations for AI and critical systems, and rules for digital asset management, which will impact AI applications within these domains. Furthermore, smart city initiatives in Da Nang and Hanoi highlight the application of AI in specific urban sectors. The Da Nang Smart City AI Initiative encompasses programs for AI application in public administration, healthcare, education, tourism, logistics, traffic management, environmental monitoring, and public security. Similarly, the Hanoi Smart City Development Action Plan to 2030 prioritizes smart urban services such as adaptive traffic signal control, comprehensive traffic monitoring, smart energy management, and intelligent public lighting systems. While these are currently policy frameworks, they lay the groundwork for potential future sector-specific rules or guidelines as AI integration deepens in these areas.
International alignment
Vietnam's approach to AI regulation demonstrates a clear intent to align with global trends and international best practices while asserting national policy priorities. The Law on Artificial Intelligence (2025) is noted for its modern, flexible approach that aligns with global trends, particularly mirroring the EU AI Act in its use of a risk-based classification model. This alignment helps position Vietnam as a proactive nation in global AI governance, aiming for deeper integration with international standards. However, Vietnam's framework also places a strong emphasis on national sovereignty, data autonomy, infrastructure, and cultural stability, differentiating it from purely harmonized approaches like the EU's. The country's National AI Strategy (Decision 127/QĐ-TTg) aims to make Vietnam a regional innovation center for AI by 2030, with specific targets for ASEAN and global ranking. The upcoming National AI Ethics Code is also intended to be aligned with international standards but tailored to Vietnam's context, emphasizing openness for development and contributing to humanity while safeguarding national interests.
What's next
Vietnam's AI regulatory landscape is still in a dynamic phase of development, with significant future developments anticipated. The Law on Artificial Intelligence (2025), set to take effect on March 1, 2026, will be followed by the crucial issuance of guiding decrees and circulars, expected around April 1, 2026. These subordinate legal instruments will provide detailed implementation guidance, including specifics on AI risk categorization, conformity assessment procedures, and the functions of AI regulatory bodies. The establishment of AI regulatory bodies or committees is anticipated by July 1, 2026, followed by the development of technical standards and guidelines by October 1, 2026, leading to full enforcement and compliance monitoring by October 1, 2027. Beyond the Law on Artificial Intelligence, the Law on Digital Technology Industry (2025), effective January 1, 2026, also requires the Government and designated ministries to issue implementing decrees, circulars, and decisions, with specific timelines for submission of draft decrees prior to September 30, 2025, and circulars to take effect on January 1, 2026. This ongoing legislative activity underscores Vietnam's commitment to building a comprehensive and adaptive regulatory framework for its burgeoning digital economy and AI ecosystem. The government also plans to introduce an updated version of its National AI Strategy and a National AI Ethics Code, further refining its policy direction and ethical guidelines for AI development and application.