What are principles of cybersecurity protection in Vietnam? What are cybersecurity protection measures in Vietnam? What are prohibited acts according to the Law on Cybersecurity in Vietnam?

What are principles of cybersecurity protection in Vietnam?

Pursuant to Article 4 of the Law on Cybersecurity in 2018 stipulating principles of cybersecurity protection in Vietnam as follows: 

1. The Constitution and law must be upheld; interests of the State, the lawful rights and interests of organizations and individuals must be protected.

2. Cybersecurity protection will be carried out under leadership of Vietnam’s Communist Party and management of the State; the entire political system and the people will be mobilized to ensure cybersecurity; emphasize the role of professional cybersecurity forces.

3. Combine cybersecurity protection and protection of national security information system with socio-economic development, protection of human rights and citizenship rights, enable organizations and individuals to operate in cyberspace.

4. Prevent, discover and take actions against the use of cyberspace for the purpose of violating national security, disrupting public order or violating lawful rights and interests of other organizations and individuals; eliminate cybersecurity threats.

5. Ensure cybersecurity of national cyberspace infrastructure; implement various measures to protect national security information systems.

6. National security information systems shall undergo cybersecurity appraisal and certification before being put into operation; undergo regular cybersecurity inspection and supervision in order to respond to and remediate any cybersecurity incident that occurs.

7. Application violations against regulations of law on cybersecurity shall be promptly and strictly dealt with.

What are cybersecurity protection measures in Vietnam?

Pursuant to Article 5 of the Law on Cybersecurity in 2018 stipulating principles of cybersecurity protection measures in Vietnam as follows: 

1. Cybersecurity protection measures include:

a) Cybersecurity appraisal;

b) Cybersecurity assessment;

c) Cybersecurity inspection;

d) Cybersecurity monitoring;

dd) Cybersecurity incident response and remediation;

e) Cybersecurity protection activities;

g) Use of cryptography for cybersecurity protection;

h) Request for suspension or termination of network information; termination and suspension of establishment, provision and use of telecommunications network, the Internet, production and use of radio transmitters and receivers as prescribed by law;

i) Request for removal of illegal or false information in cyberspace which violates national security, disrupts public order or violates lawful rights and interests of other organizations or individuals.

k) Collection of electronic data relevant to violation of national security, disruption of public order or violation of lawful rights and interests of any organization or individual in cyberspace;

l) Block or restrict activities of certain information system; termination, suspension or request for termination of certain information system; revocation of domain names;

m) Initiation of charges, investigation, prosecution and hearing in accordance with the Criminal Procedure Code;

n) Other measures defined by regulations of law on national security and handling administrative violations.

2. The Government shall specify procedures for application of cybersecurity protection measures, except for those mentioned in Point m and Point n Clause 1 of this Article.

What are regulations on protection of national cyberspace and actions against violations against the Law on Cybersecurity in Vietnam?

The State shall implement various measures to protect the national cyberspace; take precautionary and “cybersecurity breach” means an unexpected event in cyberspace that threatens national security, public order or the lawful rights and interests of an organization or individual.

The person who commits any of the violations mentioned in this Law will be liable to disciplinary penalties, administrative penalties or criminal prosecution depending on the nature and severity of the violation, and pay compensation for any damage caused.

What are prohibited acts according to the Law on Cybersecurity in Vietnam?

Pursuant to Article 8 of the Law on Cybersecurity in 2018 stipulating prohibited acts according to the Law on Cybersecurity in Vietnam as follows: 

1. Use of cyberspace for the following purposes:

a) Conducting the acts mentioned in Clause 1 Article 18 of this Law;

b) Organizing or participating in opposition to Socialist Republic of Vietnam; colluding with other people, persuading, buying off, duping, enticing or training people to oppose the government of Socialist Republic of Vietnam;

c) Distortion of history, denial of revolutionary achievements, undermining national solidarity, blasphemy, discrimination by gender or race;

d) Provision of false information for the purpose of causing public confusion or economic loss, obstructing regulatory bodies or law enforcers, violating lawful rights and interests of other organizations and individuals.

dd) Prostitution, vice, human trafficking; posting pornographic or criminal information; damaging Vietnam’s good traditions, social ethics or public health;

e) Enticing, persuading or tempting others to commits crimes.

2. Any act of cyberattack, cyber terrorism, cyber espionage and cyber crimes; causing breakdown, attacking, infiltrating, overriding, interfering with, disrupting, paralyzing or sabotaging national security information systems.

3. Manufacturing or using tools, equipment, software programs or committing any act that is meant to disrupt a telecommunications network, the Internets, computer network, information systems, information processing systems and electronic control system; spreading malware in a telecommunications network, the Internets, computer network, information systems, information processing and control system; infiltrating a telecommunications network, the Internets, computer network, information systems, information processing system or electronic device control system of another person.

4. Resisting or obstructing the cybersecurity force; attacking or illegally neutralizing cybersecurity measures.

5. Taking advantage of cybersecurity protection activities to violate national security, national interests or sovereignty, disrupt public order, violate lawful rights and interests of another organization or individual or for profiteering purposes.

6. Other acts that violate this Law.

Best regards!