{"version":"1.0","provider_name":"Tilleke &amp; Gibbins","provider_url":"https:\/\/www.tilleke.com","author_name":"Eric","author_url":"https:\/\/www.tilleke.com\/author\/eric\/","title":"What Do Vietnam\u2019s New Data Localization Requirements Mean for Domestic Enterprises? - Tilleke &amp; Gibbins","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"PssBCeKcYV\"><a href=\"https:\/\/www.tilleke.com\/insights\/what-do-vietnams-new-data-localization-requirements-mean-for-domestic-enterprises\">What Do Vietnam\u2019s New Data Localization Requirements Mean for Domestic Enterprises?<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/www.tilleke.com\/insights\/what-do-vietnams-new-data-localization-requirements-mean-for-domestic-enterprises\/embed\/#?secret=PssBCeKcYV\" width=\"600\" height=\"338\" title=\"&#8220;What Do Vietnam\u2019s New Data Localization Requirements Mean for Domestic Enterprises?&#8221; &#8212; Tilleke &amp; Gibbins\" data-secret=\"PssBCeKcYV\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script type=\"text\/javascript\">\n\/* <![CDATA[ *\/\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/* ]]> *\/\n<\/script>\n","description":"While much attention has been paid to the data localization requirements for foreign enterprises under Vietnam\u2019s 2018 Cybersecurity Law (\u201cCSL\u201d) and the recently issued Decree 53 guiding its implementation, the corresponding requirements for domestic enterprises are often overlooked, despite being potentially more troublesome. Under Decree 53, \u201cdomestic enterprises\u201d are defined to mean enterprises established or registered for establishment under Vietnamese law and having their head offices in Vietnam (Article 2.11), so this designation includes not only Vietnamese companies, but foreign-invested enterprises as well. Background Before analyzing the stipulations in Articles 26 and 27 of Decree 53 further guiding the data localization\/storage requirements, it is worth restating the very problematic Article 26.3 of the CSL, which reads: \u201cDomestic and foreign enterprises providing services on telecommunication networks or the internet or value-added services in cyberspace in Vietnam with activities of collecting, exploiting, analyzing, and\/or* processing personal information data, data on the relationships"}