Putting data protection responsibilities within the revenue framework

By early 2026, Vietnam had about 85.6 million internet users, representing over 84% of the population. Alongside the rapid expansion of digital connectivity, violations and sales of personal data in cyberspace have become increasingly complex.

Cyberattack trends and reported damage

According to statistics from the National Cyber Security Agency, in 2025 Vietnamese information systems faced about 552,000 cyberattacks, down 19.38% from 2024. However, the decline in the number of attacks does not necessarily indicate a lower overall risk.

A survey cited in the article shows that 52.3% of agencies and enterprises reported suffering damages from cyberattacks in 2025, up from 46.15% in 2024.

Enterprise-level vulnerabilities

The article attributes the situation not only to the growing sophistication of cybercriminals, but also to internal weaknesses within enterprises. Nearly half of enterprises lack dedicated cybersecurity personnel. More than 27% have not adopted any security standards. Additionally, 8.71% do not use antivirus software, and nearly 10% do not have internet access controls.

Personal Data Protection Law takes effect in early 2026

In the context of increasingly complex cybersecurity threats and continued data collection by enterprises—while risks have not yet been fully controlled—the Personal Data Protection Law that took effect from early 2026 is described as an important legal step. The law is intended to push organizations to shift from a data-extraction mindset toward responsible data governance.

Vietnam’s alignment with global regulation

Pham Ngoc Hoa, a legal expert at the National Cyber Security Agency and the High-Tech Crime Prevention division (A05), said that at the time the law was proposed, globally only about 140 countries had enacted related regulations. By the time Vietnam’s law was passed and took effect, that number had risen to nearly 170 countries.

The article presents this as evidence of the growing ubiquity of personal data protection frameworks worldwide, particularly as digital economies and digital societies expand.

Cross-border data flows increase the need for harmonization

Vietnam’s situation is highlighted by its position among the ten nations with the largest cross-border flows of personal data globally. This creates an urgent need to harmonize personal data protection not only domestically, but also in cross-border data exchanges and transfers with other countries.

The article notes that such harmonization is critical to help ensure data flows operate safely, transparently, and sustainably.

Full content of the article was published in Vietnam Economic Journal issue 14-2026, released 06/04/2026.