Issuing a plan for the implementation of the Cybersecurity Law.

The Prime Minister has issued a plan for implementing the Cybersecurity Law to raise awareness, coordinate implementation, and provide guidance for effective enforcement of the law.

VietnamPlus•16/03/2026

Prime Minister Pham Minh Chinh has just signed Decision No. 437/QD-TTg dated March 16, 2026, promulgating the Plan for the implementation of the Law on Cybersecurity (the Plan).

The purpose of this Plan is to specifically define the work content, deadlines, completion progress, and responsibilities of relevant agencies and organizations in implementing the Law on Cybersecurity (hereinafter referred to as the Law), ensuring timeliness, consistency, uniformity, effectiveness, and efficiency.

Clearly define the responsibilities of the lead agency, coordinating agencies, and the coordination mechanism between ministries, ministerial-level agencies, government agencies, and People's Committees of provinces and centrally-administered cities in carrying out activities to implement the Law nationwide.

In addition, it is necessary to raise awareness of the Law and the responsibilities of all levels, sectors, agencies, and organizations involved in its implementation.

Organize the dissemination, popularization, and guidance on the implementation of the Law; provide in-depth training and professional development in cybersecurity law and skills.

The plan outlines six specific tasks for ministries, departments, localities, and relevant agencies to implement as follows:

1. In 2026 and subsequent years, the Ministry of Public Security shall preside over and coordinate with the Ministry of Justice, the Ministry of Education and Training, the Ministry of Culture, Sports and Tourism, the Voice of Vietnam , Vietnam Television, the Vietnam News Agency, other ministries, ministerial-level agencies, government agencies, People's Committees of provinces and centrally-administered cities, and other press, radio, and television agencies to organize the dissemination, popularization, and guidance on the implementation of the Law through mass media.

The Lam Dong Provincial Military Command team participates in a live-fire exercise to ensure cybersecurity. (Photo: Chu Quoc Hung/VNA)

2. The Ministry of Public Security shall preside over and coordinate with ministries, ministerial-level agencies, government agencies, and People's Committees of provinces and centrally-administered cities to compile materials and organize in-depth training conferences on cybersecurity law and professional skills for agencies, units, and localities.

3. The Ministry of Public Security shall review legal documents related to the Law under its state management authority. Ministries, ministerial-level agencies, and People's Committees of provinces and centrally-administered cities shall review legal documents related to the Law within their assigned scope, field, and geographical area of state management, and submit the review results to the Ministry of Public Security before April 1, 2026. The Ministry of Public Security shall compile the review results and report to the Prime Minister before June 15, 2026.

4. The Ministry of Public Security shall preside over and coordinate with the Government Office, the Ministry of Justice, and other relevant agencies to develop and promulgate legal documents detailing and guiding the implementation of the Law and other related documents before July 1, 2026. Specifically:

- Draft a Government Decree detailing certain provisions of the Law on Cybersecurity (specifically points a, b, c, d, e, g, and l of Clause 1, Article 5; Clause 4, Article 25; Clause 3, Article 26; and Clause 5, Article 34 of the Law on Cybersecurity).

- Develop a Government Decree regulating the prevention and control of cybercrime and high-tech crime (including detailed regulations for Clause 5, Article 14 of the Law on Cybersecurity).

- Draft a Government Decree stipulating regulations on cybersecurity protection for information systems (including detailed regulations for Clause 2, Article 8; Clause 5, Article 9; Clause 6, Article 10; and Clause 5, Article 12 of the Law on Cybersecurity).

- Draft a Government Decree detailing the procedures for applying certain cybersecurity protection measures (specifically points e, h, i, k, and m of Clause 1, Article 5 of the Cybersecurity Law).

- Develop a Government Decree on the business activities of cybersecurity products and services (including detailed regulations for Clause 3, Article 28 and Article 29 of the Law on Cybersecurity).

- Develop a Government Decree on administrative sanctions for violations in the field of cybersecurity and personal data protection (including detailed regulations on administrative violations, forms and levels of penalties, remedial measures, and authority to impose penalties in the field of cybersecurity and personal data protection).

- Draft a Government Decree regulating the cybersecurity protection force (including detailed regulations for Clause 2, Article 30 of the Cybersecurity Law).

Guests visit the exhibition booth showcasing Bkav's cybersecurity solution model for business organizations. (Photo: Le Dong/VNA)

Issue the List of National Security-Critical Information Systems before December 31, 2026.

Before July 1, 2026, the Ministry of National Defence, in coordination with the Government Office, the Ministry of Public Security, the Ministry of Justice, and other relevant agencies, shall develop and promulgate two Government Decrees on civilian cryptographic activities (including detailed regulations on point a, clause 1, point c, clause 2 and clause 3 of Article 28, and clause 3 of Article 29 of the Law on Cybersecurity) and a Decree detailing some articles of the Law on Cybersecurity within the scope of management of the Ministry of National Defence (including regulations on preventing information conflicts in cyberspace in clause 4 of Article 22 and regulations on contents within the scope of management of the Ministry of National Defence in Articles 5, 8, 9, 10, 12, 14, 25, 26, 28, 29, 30, and 34 of the Law on Cybersecurity).

5. The Ministry of Public Security shall take the lead in drafting the Prime Minister's Decision promulgating the List of National Security-Critical Information Systems, to be issued before December 31, 2026.

6. In 2026 and subsequent years, the Ministry of Public Security shall preside over and coordinate with ministries, ministerial-level agencies, government agencies, People's Committees of provinces and centrally-administered cities, and other relevant agencies and organizations to monitor, inspect, and urge the implementation of the Law and other legal documents detailing and guiding its implementation.

(Vietnam+)

Source: https://www.vietnamplus.vn/ban-hanh-ke-hoach-trien-khai-thi-hanh-luat-an-ninh-mang-post1099329.vnp