by any agency or organization no later than twenty four (24) hours after the time of a request from the CTF under the Ministry of Public Security or from a competent agency under the Ministry of Information and Communications, and to save/maintain system logs in order to serve investigation of and dealing with breaches of the law on cybersecurity within a [specified] period [to be] stipulated by the Government; (c) Not to provide or to cease provision of services on telecom networks and on the Internet and other value added services to organizations and individuals who upload in cyberspace information with the contents prescribed in clauses 1 to 5 of article 16 of this Law, when requested by the CTF under the Ministry of Public Security or by a competent agency under the Ministry of Information and Communications. 3. Domestic and foreign service providers on telecom networks and on the Internet and other value added services in cyberspace in Vietnam [cyberspace service providers] carrying out activities of collecting, exploiting [using], analysing and processing data [being] personal information, data about service users' relationships and data generated by service users in Vietnam must store such data in Vietnam for a [specified] period [to be] stipulated by the Government. Foreign enterprises referred to in this clause must have branches or representative offices in Vietnam. 4. The Government shall provide detailed regulations on clause 3 of this article. Article 27 Research and development of cybersecurity 1. Contents of research and development of cybersecurity comprise: (a) Establishment of systems of cybersecurity protective software and equipment; (b) Methods of evaluating whether cybersecurity software and equipment satisfy standards, and minimizing the existence of security vulnerabilities or weaknesses, and malware; (c) Methods of checking whether the hardware and software which is provided in fact functions properly; (d) Methods of protecting State secrets, work-related secrets, business secrets, personal secrets, family secrets and private life [personal privacy], and the capability of maintaining confidentiality when transmitting information in cyberspace; (dd) Determination of the sources of information transmitted in cyberspace; (e) Resolution of cybersecurity threats; (g) Establishment of the network range and the cybersecurity testing environment; (h) Technical initiatives increasing cybersecurity awareness and skills; (i) Cybersecurity forecasts; (k) Practical research and theoretical development of cybersecurity. 2. Relevant agencies, organizations and individuals have the right to research and develop cybersecurity. Article 28 1. Improvement of self-autonomy regarding cybersecurity The State encourages and facilitates agencies, organizations and individuals to improve their selfautonomy regarding cybersecurity and to increase the productivity, inspection, assessment and testing of digital devices, network services and network applications.  Allens - Vietnam Laws Online Database on www.vietnamlaws.com 19

Select target paragraph3