Vietnam’s draft Cybersecurity Law 2025 marks a significant milestone by officially introducing the concept of “data security” into the national legal framework, recognizing data as a national resource requiring the highest level of protection to safeguard cyberspace and enable digital economic growth.

Unveiled at a policy roundtable hosted by the National Cybersecurity Association on November 24, the draft law was developed by the Ministry of Public Security and submitted to the National Assembly. It introduces strategic updates to enhance legal defenses against emerging cyber threats while protecting national interests and citizen rights in the digital era.

Data security legally defined for the first time

Hiep hoi an ninh mang .jpg
The roundtable “Cybersecurity Law 2025: A step forward in protecting data security” was organized by the National Cybersecurity Association on November 24.
 
 
 

For the first time, the draft explicitly defines “data security” as a critical component of national cybersecurity. It elevates data - an essential element of digital transformation - to a central position in Vietnam’s cyber governance structure. Data security refers to the secure collection, processing, and use of information for national digital transformation and economic development.

As cyberattacks increasingly target or compromise data, this legal provision helps close a key gap while ensuring stronger protection of essential information systems. Organizations without sufficient technical or human resources will now be compelled to adopt safer methods of managing and accessing data, such as through trusted government databases or certified service providers, reducing risks from decentralized and vulnerable data storage.

Tied to digital transformation

At the policy roundtable, Lieutenant Colonel Nguyen Dinh Do Thi, Deputy Head of the Cybersecurity and High-Tech Crime Prevention Department, stated that ensuring cybersecurity and data protection is inseparable from the country’s scientific, technological, and digital progress.

The draft law outlines six key state policies:

Prioritize cybersecurity across national defense, economy, science, and diplomacy.
Build a secure cyberspace aligned with national security and social order.
Develop skilled cyber defense teams and invest in research and innovation.
Encourage public-private cooperation in incident response.
Prioritize domestic cybersecurity products and services.
Enhance international cooperation on cyber defense.

Nguyen Dinh Do Thi .jpg
Lieutenant Colonel Nguyen Dinh Do Thi, speaking at the roundtable.

Data as the “new oil” of the economy

Vu Ngoc Son, Head of Technology Research and Cooperation at the National Cybersecurity Association, likened data to the “new oil” of the digital economy. He stressed that data breaches threaten not only economic interests but also national security and public trust. Elevating data to a protected national resource reflects Vietnam’s forward-thinking governance and commitment to sustainable digital development.

“Data security must be anchored in law. The draft Cybersecurity Law 2025 rightly emphasizes the accountability of institutional leaders. Without strong understanding from the top, technical investments may lack direction,” he said. “However, when leadership is well-informed, data security policies become strategic, effective, and long-lasting.”

Private sector welcomes legal clarity

Trần Cong Quynh Lan, Deputy CEO of VietinBank, said early compliance with the law has helped the bank establish a competitive advantage in information security. It also offers a clear pathway to building a Data Governance Framework and scaling AI and data analytics programs.

Lê Cong Trung, Cybersecurity Division Head at MobiFone, emphasized the human factor. “Technical teams must deeply understand network architecture and security protocols. A secure digital infrastructure is the bedrock of national cyber defense, especially amid Vietnam’s rapid digital transformation.”

Experts agreed on the need for regulators to promptly issue standards and technical guidelines, while enterprises should build end-to-end cybersecurity frameworks that include data classification, encryption, safe storage, monitoring, and incident response.

The Cybersecurity Law 2025 is seen as a strategic legal advancement, enabling the secure growth of Vietnam’s digital economy, protecting essential digital services, and safeguarding citizens’ rights in an increasingly connected world.

Thai Khang