On January 28, Standing member of the Party Central Secretariat, Tran Cam Tu, signed Directive No. 57 on behalf of the Secretariat, outlining sweeping measures to strengthen cybersecurity, data protection, and information security across Vietnam’s political system.

The directive responds to what the Secretariat describes as increasingly complex and unpredictable developments in global and domestic cyberspace. As data becomes a strategic resource and artificial intelligence rapidly expands, cyberspace is emerging as a new domain of strategic competition.

The Party affirms that cybersecurity and data sovereignty are no longer purely technical issues - they are core matters of national security, sovereignty, political stability, and global competitiveness.

A national mandate for cybersecurity

Directive 57 calls for a unified, top-down approach. All Party organizations and political institutions must recognize cybersecurity and data security as urgent, ongoing responsibilities. These are to be managed directly by the Party and uniformly administered by the state.

The armed forces and public security forces are identified as the backbone of this defense system. The directive emphasizes a strategy shift from “passive defense” to “proactive defense,” urging the creation of a “comprehensive, anticipatory cybersecurity shield” to detect and neutralize threats early and effectively.

The principle of "self-reliance and resilience" must guide the development of Vietnam’s cybersecurity capabilities. All information systems must be secure by design - from planning through to deployment. Any system that does not meet security requirements must not be deployed.

Strict controls must also be applied to the collection, management, and usage of digital data. State secrets and sensitive data must be protected at the highest level, including during testing phases.

Leaders at every level are held directly accountable for ensuring cybersecurity and data protection within their jurisdictions. Their performance in this area will now factor into annual evaluations of Party organizations, civil servants, and public employees.

Crackdown on anonymous accounts and fake IDs

One of the directive’s most striking provisions is the nationwide requirement for identity authentication across cyberspace. This includes citizens, social media users, telecom subscribers, and owners of digital assets such as IP addresses and domain names.

The Secretariat demands a “clean sweep” of so-called “rubbish SIMs,” fake accounts, and anonymous users. All social media platforms operating in Vietnam will be required to enforce mandatory identity verification and implement age-restriction mechanisms to protect minors.

The Ministry of Public Security will take the lead in managing cybersecurity and data protection across the entire political system, from system design and development to operation. The Ministry of National Defense and the Government Cipher Committee will oversee cryptographic security under the new Cybersecurity Law passed in 2025.

Investing in infrastructure and national capabilities

The directive calls for accelerated investment in cybersecurity infrastructure and technologies. It instructs national agencies to develop quantum-resistant encryption and secure chips made in Vietnam - strategic technologies deemed vital to resisting emerging quantum decryption threats.

Vietnam will also build a layered national cybersecurity architecture to protect the entire internet backbone and information systems of all government, party, and enterprise sectors. Information-sharing networks will be established between agencies to support real-time threat monitoring, coordinated incident response, and recovery.

The Secretariat also promotes the development of a homegrown cybersecurity industry. Resources will be prioritized to develop “Make in Vietnam” cybersecurity products and capabilities.

In a bid to elevate Vietnam’s leadership in the region, the directive encourages the establishment of a regional training center for cybersecurity and cybercrime prevention.

A new era of cyber sovereignty

Directive 57 marks a significant shift in Vietnam’s digital policy - from passive regulation to active enforcement. By mandating identity verification, emphasizing technological sovereignty, and holding top officials accountable, the Party signals a new era in its approach to safeguarding cyberspace.

As global cyber threats escalate and AI transforms the landscape, Vietnam is placing cybersecurity at the heart of national security - and putting every user on the record.

Tran Thuong