Jeff, this section is for you. Current state: Vietnam is solidly Phase 1 in your framework as of today. No platform has been fined, warned, or blocked for child safety or age verification. However, the lawyer I interviewed strongly believes there are teeth coming in H2 of this year.
Le Ton Viet, Lawyer at Russin & Vecchi, believes that teeth are coming in H2 2026. The PDPL sanctions decree completed public consultation on March 26 and is expected to be finalized soon. Once enacted, revenue-based penalties up to 5% of annual revenue become enforceable.
Viet's direct assessment: "I think the enforcement would actually get more intense after the election in the next few months." He expects enforcement to intensify in H2 2026 once post-election stability takes hold.
The market will unlock starting then. We need to be laying the groundwork now to be ready for it.
The VNG/Roblox situation is a live example of this dynamic — the PDPL is already creating real compliance problems for major platforms, even before penalties are finalized. This is the early signal.
| Date | Event | Phase Impact |
|---|---|---|
| Dec 2024 | Decree 147 effective | User auth + parental registration mandated |
| Jan 2026 | PDPL effective; TikTok + Zalo fined ($64K) | Consumer protection enforcement (including child safety) |
| Jan 2026 | Directive 57 issued | Party-level mandate: age restrictions for minors |
| Mar 2026 | Biometric SIM verification live | National identity infra being built now |
| Q2 2026 | VNeID social media integration regs expected | Potential "target list" moment |
| Jul 1 | New Cybersecurity Law effective | Expanded enforcement powers; MPS lead |
| H2 2026 | Post-election enforcement intensification | Viet (Russin & Vecchi): teeth expected here |
| Q3 2026 | VNeID integration technical deadline | Implementation pressure on all platforms |
Viet's article on Vietnam's data protection framework: Lexology: Vietnam Data Protection →