by any agency or organization no later than twenty four (24) hours after the time of a request from
the CTF under the Ministry of Public Security or from a competent agency under the Ministry of
Information and Communications, and to save/maintain system logs in order to serve investigation of
and dealing with breaches of the law on cybersecurity within a [specified] period [to be] stipulated by
the Government;
(c)
Not to provide or to cease provision of services on telecom networks and on the Internet and other
value added services to organizations and individuals who upload in cyberspace information with the
contents prescribed in clauses 1 to 5 of article 16 of this Law, when requested by the CTF under the
Ministry of Public Security or by a competent agency under the Ministry of Information and
Communications.
3.
Domestic and foreign service providers on telecom networks and on the Internet and other value
added services in cyberspace in Vietnam [cyberspace service providers] carrying out activities of
collecting, exploiting [using], analysing and processing data [being] personal information, data about
service users' relationships and data generated by service users in Vietnam must store such data in
Vietnam for a [specified] period [to be] stipulated by the Government.
Foreign enterprises referred to in this clause must have branches or representative offices in
Vietnam.
4.
The Government shall provide detailed regulations on clause 3 of this article.
Article 27
Research and development of cybersecurity
1.
Contents of research and development of cybersecurity comprise:
(a)
Establishment of systems of cybersecurity protective software and equipment;
(b)
Methods of evaluating whether cybersecurity software and equipment satisfy standards, and
minimizing the existence of security vulnerabilities or weaknesses, and malware;
(c)
Methods of checking whether the hardware and software which is provided in fact functions properly;
(d)
Methods of protecting State secrets, work-related secrets, business secrets, personal secrets, family
secrets and private life [personal privacy], and the capability of maintaining confidentiality when
transmitting information in cyberspace;
(dd)
Determination of the sources of information transmitted in cyberspace;
(e)
Resolution of cybersecurity threats;
(g)
Establishment of the network range and the cybersecurity testing environment;
(h)
Technical initiatives increasing cybersecurity awareness and skills;
(i)
Cybersecurity forecasts;
(k)
Practical research and theoretical development of cybersecurity.
2.
Relevant agencies, organizations and individuals have the right to research and develop
cybersecurity.
Article 28
1.
Improvement of self-autonomy regarding cybersecurity
The State encourages and facilitates agencies, organizations and individuals to improve their selfautonomy regarding cybersecurity and to increase the productivity, inspection, assessment and
testing of digital devices, network services and network applications.
Allens - Vietnam Laws Online Database on www.vietnamlaws.com
19