On July 25, 2025, the Government issued Decree No. 211/2025/NĐ‑CP on civil cryptography activities, while also amending and supplementing several provisions of Decree No. 15/2020/NĐ‑CP on administrative penalties in areas such as postal services, telecommunications, radio frequencies, information technology, and electronic transactions. Decree No. 211/2025/NĐ‑CP takes effect on September 9, 2025, replacing Decree No. 58/2016/NĐ‑CP, marking a significant step forward in improving the legal framework for cybersecurity and civil cryptography activities in Vietnam.
Under Decree No. 211/2025/NĐ‑CP, many products are removed from the list of civil cryptography items subject to regulatory control, such as self-encrypting drives (SEDs), storage devices, and products with encryption functions solely intended for remote installation purposes.
View the full text of Decree No. 211/2025/NĐ‑CP:
| GOVERNMENT | SOCIALIST REPUBLIC OF VIETNAM |
| No. 211/2025/ND-CP | Hanoi, July 25, 2025 |
REGULATIONS ON CIVIL CRYPTOGRAPHY ACTIVITIES AND AMENDMENTS AND SUPPLEMENTS TO A NUMBER OF ARTICLES OF THE GOVERNMENT'S DECREE NO. 15/2020/ND-CP DATED FEBRUARY 03, 2020 ON SANCTIONING ADMINISTRATIVE VIOLATIONS IN THE FIELDS OF POST, TELECOMMUNICATIONS, RADIO FREQUENCY, INFORMATION TECHNOLOGY AND ELECTRONIC TRANSACTIONS ARE AMENDED, SUPPLEMENTING A NUMBER OF ARTICLES IN DECREE NO. 14/2022/ND-CP DATED JANUARY 27, 2022 OF THE GOVERNMENT
Pursuant to the Law on Organization of the Government No. 63/2025/QH15;
Pursuant to the Law on Cyber Information Security No. 86/2015/QH13;
Pursuant to the Law on Investment No. 61/2020/QH14 amended and supplemented a number of articles under Law No. 57/2024/QH14;
Pursuant to the Law on Handling of Administrative Violations No. 15/2012/QH13 amended and supplemented a number of articles under Law No. 54/2014/QH13, Law No. 18/2017/QH14, Law No. 67/2020/QH14, Law No. 11/2022/QH15, Law No. 56/2024/QH15 and Law No. 88/2025/QH15;
Pursuant to the Law amending and supplementing a number of articles of 37 Laws related to planning No. 35/2018/QH14;
At the request of the Minister of National Defense;
The Government promulgates a Decree regulating civil cryptography activities and amending and supplementing a number of articles of the Government's Decree No. 15/2020/ND-CP dated February 03, 2020 stipulating penalties for administrative violations in the fields of post, telecommunications, radio frequencies, etc information technology and electronic transactions are amended and supplemented a number of articles in Decree No. 14/2022/ND-CP dated January 27, 2022 of the Government.
Article 1. Scope of adjustment
This Decree details a number of articles of the Law on Cyber Information Security on trading in civil cryptographic products and services, exporting and importing civil cryptographic products, assessing the conformity of civil cryptographic products and amending and supplementing a number of articles of the Government's Decree No. 15/2020/ND-CP dated February 03, 2020 regulating the handling of penalties for administrative violations in the fields of post, telecommunications, radio frequency, information technology and electronic transactions are amended and supplemented by a number of articles in Decree No. 14/2022/ND-CP dated January 27, 2022 of the Government.
Article 2. Subjects of application
1. Enterprises trading in civil cryptographic products and services, exporting and importing civil cryptographic products; organizations participating in the conformity assessment of civil cryptography products and other relevant organizations and individuals.
2. Organizations and individuals that commit acts of administrative violation in business activities or use of civil codes; persons competent to make records and sanction administrative violations in business activities, use of civil codes and other relevant organizations and individuals.
TRADING IN CIVIL CRYPTOGRAPHY PRODUCTS AND SERVICES AND EXPORTING AND IMPORTING CIVIL CRYPTOGRAPHY PRODUCTS
Article 3. List of civil cryptographic products and services, List of civil cryptographic products exported and imported under licenses
To promulgate the list of civil cryptographic products and services in Appendix I and the list of civil cryptographic products exported and imported under licenses in Appendix II to this Decree.
Article 4. Application of the List of civil cryptographic products exported and imported under licenses
1. The list of civil cryptographic products exported or imported under licenses shall only apply to civil cryptographic products for which both HS codes, descriptions of goods and descriptions of cryptographic technical characteristics are identical to HS codes, descriptions of goods and descriptions of cryptographic technical characteristics of goods on the list.
2. In case there is a difference in the determination of commodity codes in the list promulgated together with this Decree and the list of Vietnamese exports and imports, the determination of commodity codes shall comply with the provisions of the customs law.
Article 5. Conditions for issuance of licenses for trading in civil cryptographic products and services
1. An enterprise shall be granted a license to trade in civil cryptographic products and services when it fully satisfies the conditions specified in Clause 2, Article 31 of the Law on Cyber Information Security.
2. The conditions for granting licenses specified at Point a, Clause 2, Article 31 of the Law on Cyber Information Security are specified as follows: Enterprises must have at least 02 technical staff with a university diploma or higher in one of the electronics and telecommunications branches, information technology, mathematics, information security; managers and executives who have a university diploma in one of the disciplines of electronics - telecommunications, information technology, mathematics, information security or have a university diploma in another major and have a training certificate in information security.
3. Conditions for issuance of licenses specified at Point dd, Clause 2, Article 31 of the Law on Cyber Information Security are specified as follows: Enterprises must have a system to serve customers and ensure technical assurance in accordance with the scope, objects of supply, scale and quantity of products, according to form No. 04, Appendix III of this Decree.
Article 6. Order and procedures for issuance, amendment, supplementation, re-issuance and extension of licenses for trading in civil cryptographic products and services
1. A dossier of application for a new license for trading in civil cryptographic products and services comprises:
a) An application for a license to trade in civil cryptographic products and services, made according to form No. 01, Appendix III of this Decree;
b) A copy of the enterprise registration certificate or investment registration certificate or other papers of equivalent value;
c) A copy of the diploma or professional certificate on information security and safety of the managerial, executive and technical team;
d) The technical plan includes documents on technical characteristics and technical parameters of the product; standards and technical regulations of products; service standards and quality; technical measures and solutions; product warranty and maintenance plan made according to form No. 03, Appendix III of this Decree;
dd) The business plan includes the scope, objects of supply, the scale and quantity of products and services of the system serving customers and technical assurance according to form No. 04, Appendix III of this Decree;
e) The plan on cyber information security and safety in the process of management and provision of civil cryptographic products and services, made according to form No. 05, Appendix III of this Decree.
2. A dossier of application for issuance of an amended or supplemented license for trading in civil cryptographic products and services comprises:
a) An application for amendment or supplementation of the license, made according to form No. 02, Appendix III of this Decree;
b) A copy of the enterprise registration certificate or investment registration certificate or other papers of equivalent value;
c) The granted license for trading in civil cryptographic products and services;
d) Technical plans, business plans, cyber information security and safety plans for products and services requested for supplementation as prescribed at Points d, dd and e, Clause 1 of this Article in case the enterprise requests the addition of civil cryptography products and services.
3. A dossier of application for re-issuance of a license for trading in civil cryptographic products and services comprises: An application for re-issuance of a license, made according to form No. 02, Appendix III of this Decree.
4. A dossier of application for extension of a license for trading in civil cryptographic products and services comprises:
a) An application for extension of the license, made according to form No. 02, Appendix III of this Decree;
b) An effective license for trading in civil cryptographic products and services;
c) Report on the operation of the enterprise in the last 02 years.
5. For the dossier components specified at Point b, Clause 1, Point b, Point c, Clause 2, Point b, Clause 4 of this Article, the Government Cipher Committee shall have to look up at the National Database without requiring enterprises to provide them.
6. Enterprises carrying out procedures for issuance, amendment, supplementation, re-issuance or extension of licenses for trading in civil cryptographic products and services shall submit 01 set of dossier directly or via the postal system or online public services to the Government Cipher Board, telephone number/fax number: 024-3232.3313, email: info@nacis.gov.vn, National Public Service Portal: https://dichvucong.gov.vn. Dossiers submitted online must be digitally signed in accordance with the law on digital signatures.
7. Within 03 working days from the date of receipt of the dossier, the Government Cipher Committee shall check the validity of the dossier; In case the dossier is invalid, notify the enterprise in writing of the contents that need to be amended and supplemented. Within 05 working days from the date of receipt of the written notice, the enterprise is responsible for completing the dossier. In case the amendment and supplementation of the dossier still fails to meet the contents as notified or exceeds the time limit for completing the dossier, within 03 working days, the Government Cipher Committee shall notify the enterprise in writing of the reason for not granting the license.
From the date of receipt of a complete and valid dossier, the Government Cipher Committee shall appraise and issue a new license for trading in civil cryptographic products and services within 20 days; re-grant of licenses for trading in civil cryptographic products and services within 10 working days for cases of amendment, supplementation and extension of licenses; re-grant of licenses for trading in civil cryptographic products and services within 04 working days for cases of loss or damage to licenses. In case of refusal of licensing, the Government Cipher Committee shall notify in writing and clearly state the reason. The license to trade in civil cryptographic products and services shall comply with form No. 06, Appendix III of this Decree.
Article 7. Order and procedures for applying for a license to export or import civil cryptographic products
1. A dossier of application for a license for export or import of civil cryptographic products shall be made in 01 set, including:
a) An application for a license to export or import civil cryptographic products, made according to form No. 07, Appendix III of this Decree;
b) A copy of the license for trading in civil cryptographic products and services;
c) A copy of the certificate of technical-regulation conformity for imported civil cryptographic products.
2. For the dossier components at Points b and c, Clause 1 of this Article, the Government Cipher Committee shall have to look up at the National Database without requiring enterprises to provide them.
3. Enterprises carrying out procedures for issuance of licenses for export or import of civil cryptographic products shall submit dossiers directly or via the postal system or online public services to the Government Cipher Committee at the address specified in Clause 6, Article 6 of this Decree.
4. Within 01 working day from the date of receipt of the dossier, the Government Cipher Committee shall check the validity of the dossier; In case the dossier is invalid, notify the enterprise in writing of the contents that need to be amended and supplemented. In case the amendment and supplementation of the dossier still fails to meet the contents as noticed, the Government Cipher Committee shall notify the enterprise in writing of the reason for not granting the license.
From the date of receipt of a complete and valid dossier, the Government Cipher Committee shall appraise and grant a license for export and import of civil cryptographic products within 07 working days. In case of refusal of licensing, the Government Cipher Committee shall notify in writing and clearly state the reason. Licenses for export and import of civil cryptographic products shall comply with form No. 08, Appendix III of this Decree.
CIVIL CRYPTOGRAPHY PRODUCT CONFORMITY ASSESSMENT
Article 8. Responsibilities for managing the conformity assessment of civil cryptography products
The Government Cipher Committee assists the Minister of National Defense in managing the conformity assessment of civil cryptography products, having the following tasks:
1. Issuance of certificates of registration of conformity assessment of civil cryptographic products.
2. To appoint and manage the operation of organizations assessing the conformity of civil cryptography products.
3. Receiving and announcing the conformity of civil cryptographic products.
Article 9. Conditions, order and procedures for registration of conformity assessment activities, appointment of conformity assessment organizations and declaration of conformity of civil cryptography products
1. Conditions, order and procedures for registration of conformity assessment activities; appoint organizations to assess the conformity and announce the conformity of civil cryptographic products in accordance with the provisions of current law on conditions, order and procedures for business registration of conformity assessment services, appoint organizations to assess conformity and announce conformity for products, goods.
2. Dossiers of registration of conformity assessment activities, requests for appointment of conformity assessment organizations and declaration of conformity of civil cryptographic products shall be submitted directly to the Government Cipher Committee at the address specified in Clause 6, Article 6 of this Decree.
Article 10. Acknowledging the results of the civil cryptography product conformity assessment
1. The recognition of the results of conformity assessment of civil cryptography products between Vietnam and other countries and territories, between Vietnam's conformity assessment organizations and conformity assessment organizations of other countries and territories shall comply with the current provisions of law on standards and technical regulations.
2. The Government Cipher Committee shall assist the Minister of National Defense in considering and deciding to unilaterally acknowledge the results of conformity assessment of civil cryptography products of international conformity assessment organizations and foreign conformity assessment organizations in service of the state management of civil cryptography.
AMENDING AND SUPPLEMENTING A NUMBER OF ARTICLES OF THE GOVERNMENT'S DECREE NO. 15/2020/ND-CP DATED FEBRUARY 03, 2020 STIPULATING PENALTIES FOR ADMINISTRATIVE VIOLATIONS IN THE FIELDS OF POST, TELECOMMUNICATIONS, RADIO FREQUENCY, INFORMATION TECHNOLOGY AND ELECTRONIC TRANSACTIONS ARE AMENDED AND SUPPLEMENTED A NUMBER OF ARTICLES IN THE GOVERNMENT'S DECREE NO. 14/2022/ND-CP DATED JANUARY 27, 2022
Article 11. Amending and supplementing a number of articles of Decree No. 15/2020/ND-CP as follows:
1. To amend and supplement a number of points and clauses of Article 3 as follows:
a) Point a, Clause 2 is amended as follows:
"a) Deprivation of the right to use licenses for a term of between 01 and 24 months, for postal licenses; Telecommunications License; Licenses for setting up telecommunications networks; License for installation of telecommunications cables at sea; License to use radio frequencies; License to trade in cyber information security products and services; License to set up social networks; License to provide G1 electronic game services; License to provide public digital signature certification services; License to trade in civil cryptographic products and services; licenses and practice certificates;".
b) Point b Clause 2 is amended as follows:
"b) Confiscation of material evidences and means of administrative violations in the fields of post, telecommunications, radio frequency, information technology, electronic transactions and cyber information security;".
c) Point n, Clause 3 is amended as follows:
"n) Forcible re-export of imported cyber information security products and imported civil cryptographic products;".
d) Point q, Clause 3 is amended as follows:
"q) Propose competent agencies to revoke licenses due to violations of law;".
dd) Points r, s, t, u are added after Point q, Clause 3 as follows:
"r) Forcible reporting on the business situation of civil cryptographic products and services and aggregation of customer information; the situation of export and import of civil cryptographic products;
s) Forcible establishment, storage and confidentiality of customer information, name, type, quantity and purpose of use of civil cryptographic products and services;
t) Forcible declaration of the use of civil cryptographic products not provided by enterprises licensed to trade in civil cryptographic products and services;
u) Forcible supply of information related to the code key to the competent state agency.".
2. Articles 93a and 93b are added after Article 93 as follows:
"Article 93a. Violations against regulations on business in the field of civil cryptography
1. A warning shall be imposed for acts of submitting reports to the Government Cipher Committee on the business of civil cryptographic products and services and aggregating customer information less than 01 month behind schedule.
2. A fine of between VND 20,000,000 and VND 30,000,000 shall be imposed for one of the following acts:
a) Failing to manage, preserve and archive dossiers and documents on technical and technological solutions of civil cryptography products in accordance with the law on management, archiving and preservation of dossiers and documents;
b) Failing to establish, store and keep confidential customer information, name, type, quantity and purpose of use of civil cryptographic products and services;
c) Failing to submit reports or submitting reports to the Government Cipher Committee on the situation of trading in civil cryptographic products and services, exporting and importing civil cryptographic products and synthesizing customer information 01 month or more behind the prescribed time limit.
3. A fine of between VND 30,000,000 and VND 40,000,000 shall be imposed for failing to carry out procedures for amendment and supplementation of licenses for trading in civil cryptographic products and services when changing names or legal representatives.
4. A fine of between VND 40,000,000 and VND 50,000,000 shall be imposed for one of the following acts:
a) Failing to maintain one of the conditions for being granted a license to trade in civil cryptographic products and services;
b) Refusing to refuse to provide civil cryptographic products and services when detecting organizations and individuals violating the law on the use of civil cryptographic products and services; when detecting organizations and individuals violating the agreed commitments on the use of civil cryptographic products and services provided by enterprises;
c) Using civil cryptography products and services not provided by enterprises licensed to trade in civil cryptography products and services without declaring to the Government Cipher Committee.
5. A fine of between VND 50,000,000 and VND 60,000,000 shall be imposed for one of the following acts:
a) Providing inaccurate information to be granted a license to trade in civil cryptographic products and services;
b) Trading in civil cryptographic products and services in contravention of the contents stated in the license for trading in civil cryptographic products and services;
c) Refusing to provide necessary information related to code keys to competent state agencies upon request.
6. The fine level for acts of trading in civil cryptographic products and services without a license to trade in civil cryptographic products and services is prescribed as follows:
a) A fine ranging from VND 50,000,000 to VND 60,000,000 shall be imposed if the value of infringing goods is less than VND 50,000,000;
b) A fine ranging from VND 60,000,000 to VND 80,000,000 shall be imposed if the value of infringing goods is between VND 50,000,000 and less than VND 100,000,000;
c) A fine ranging from VND 80,000,000 to VND 100,000,000 shall be imposed if the value of infringing goods is between VND 100,000,000 and less than VND 150,000,000;
d) A fine ranging from VND 100,000,000 to VND 120,000,000 shall be imposed if the value of infringing goods is between VND 150,000,000 and less than VND 200,000,000;
dd) A fine ranging from VND 120,000,000 to VND 140,000,000 shall be imposed if the value of infringing goods is between VND 200,000,000 and less than VND 250,000,000;
e) A fine ranging from VND 140,000,000 to VND 160,000,000 shall be imposed if the value of infringing goods is between VND 250,000,000 and less than VND 300,000,000;
g) A fine ranging from VND 160,000,000 to VND 180,000,000 shall be imposed if the value of infringing goods is VND 300,000,000 or more.
7. A fine of between VND 80,000,000 and VND 100,000,000 shall be imposed for one of the following acts:
a) Failing to coordinate and create conditions for competent state agencies to take professional measures upon request;
b) Failing to suspend or continuously provide civil cryptographic products and services to ensure national defense and security, social order and safety at the request of competent state agencies.
8. A fine of between VND 100,000,000 and VND 120,000,000 shall be imposed for acts of trading in civil cryptographic products and services whose subjects and purposes cause harm to national defense, national security, social order and safety.
9. Additional sanctions:
a) Deprivation of the right to use the license to trade in civil cryptographic products and services from 03 months to 06 months, for the violations specified at Point b, Clause 4 of this Article;
b) Suspension of trading in civil cryptographic products and services for a period of between 03 and 06 months, for violations specified in Clause 7 of this Article;
c) Confiscate material evidences and means used to commit acts of violation specified in Clauses 6 and 8 of this Article.
10. Remedial measures:
a) Forcible reporting on the business situation of civil cryptographic products and services and aggregation of customer information, for acts of failing to submit the report specified at Point c, Clause 2 of this Article;
b) Forcible establishment, storage and confidentiality of customer information, name, type, quantity and purpose of use of civil cryptographic products and services, for violations specified at Point b, Clause 2 of this Article;
c) Forcible declaration of the use of civil cryptographic products and services not provided by enterprises licensed to trade in civil cryptographic products and services, for the violations specified at Point c, Clause 4 of this Article;
d) Forcible supply of information related to code locks to competent state agencies, for the violations specified at Point c, Clause 5 of this Article;
dd) Forcible return of illegal profits obtained from the commission of violations specified at Point b, Clause 4, Points a and b, Clause 5, Clause 6, Point b, Clause 7, Clause 8 of this Article.
Article 93b. Violations against regulations on export and import of civil cryptographic products
1. A caution shall be imposed for submitting a report to the Government Cipher Committee on the export or import of civil cryptographic products less than 01 month behind schedule.
2. A fine of between VND 20,000,000 and VND 30,000,000 shall be imposed for failing to submit a report or submitting a report to the Government Cipher Commission on the export or import of civil cryptographic products 01 month or more behind the prescribed time limit.
3. A fine of between VND 30,000,000 and VND 40,000,000 shall be imposed for failing to maintain one of the conditions for being granted a license to export or import civil cryptographic products, except for the conditions specified at Point c, Clause 2, Article 34 of the Law on Cyber Information Security.
4. A fine of between VND 40,000,000 and VND 50,000,000 shall be imposed for acts of exporting or importing civil cryptographic products in contravention of the contents stated in the license for export or import of civil cryptographic products.
5. A fine of between VND 50,000,000 and VND 60,000,000 shall be imposed for one of the following acts:
a) Providing inaccurate information in order to be granted a license to export or import civil cryptographic products;
b) Failing to coordinate and create conditions for competent state agencies to take professional measures upon request.
6. A fine of between VND 60,000,000 and VND 80,000,000 shall be imposed for acts of exporting or importing civil cryptographic products without a license to export or import civil cryptographic products.
7. A fine of between VND 80,000,000 and VND 100,000,000 shall be imposed for one of the following acts:
a) Failing to suspend or continuously export or import civil cryptographic products to ensure national defense and security, social order and safety at the request of competent state agencies;
b) Exporting or importing civil cryptographic products whose subjects and purposes of use of civil cryptographic products cause harm to national defense, national security, social order and safety.
8. Additional sanctions:
Confiscate material evidences and means to commit acts of violation specified in Clause 7 of this Article.
9. Remedial measures:
a) Forcible reporting on the export or import of civil cryptographic products, for acts of failing to submit the reports specified in Clause 2 of this Article;
b) Forcible return of illegal profits obtained from the commission of violations specified in Clause 4, Point a, Clause 5, Clauses 6 and 7 of this Article;
c) Forcible re-export of imported civil cryptographic products, for the violations specified in Clause 4, Point a, Clause 5 and Clause 6 of this Article.".
3. Article 114 is amended as follows:
"Article 114. Competence to sanction administrative violations of the Inspectorate
1. Inspectors of ministries and ministerial-level agencies assigned to perform inspection and examination tasks within the scope of state management of ministries and ministerial-level agencies have the right to:
a) Impose a warning;
b) A fine of up to VND 20,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 8,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
2. Heads of inspection teams of agencies: Department of Radiation and Nuclear Safety, Vietnam Maritime and Waterways Administration, Civil Aviation Authority of Vietnam and provincial-level Police; Heads of military zone-level inspection teams assigned to perform inspection and examination tasks within the scope of state management of ministries and ministerial-level agencies have the right to:
a) Impose a warning;
b) A fine of up to VND 100,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations;
d) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
3. Chief Inspector of the Department of Radiation and Nuclear Safety; Chief Inspector of the Vietnam Maritime and Waterways Administration; Chief Inspector of the Civil Aviation Authority of Vietnam; Chief Inspector of National Defense of the Military Zone; Chief Inspector of National Defense of the Hanoi Capital Command; Chief Inspector of the State Bank of the region; Provincial-level Chief Inspectors of Public Security assigned to perform inspection and examination tasks within the scope of state management of ministries and ministerial-level agencies have the right to:
a) Impose a warning;
b) A fine of up to VND 160,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 64,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Deprivation of the right to use licenses and practice certificates for a definite term or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
4. Chief Inspectors of ministries and ministerial-level agencies; Heads of inspection teams of ministerial-level and ministerial-level agencies assigned to perform inspection and examination tasks within the scope of state management of ministries and ministerial-level agencies; Heads of agencies performing state management tasks according to specialized branches and domains have the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.".
4. Article 114a is added after Article 114 as follows:
"Article 114a. Competence to sanction administrative violations of the Cipher Inspectorate and the Head of the Government Cipher Committee
1. Inspectors of Government Cipher Committees have the right to:
a) Impose a warning;
b) A fine of up to VND 20,000,000 shall be imposed for acts of administrative violation of civil cryptography in the field of cyber information security;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
2. The head of the inspection team of the Government Cipher Committee has the right to:
a) Impose a warning;
b) A fine of up to VND 100,000,000 shall be imposed for acts of administrative violation of civil cryptography in the field of cyber information security;
c) Confiscate material evidences and means used in administrative violations;
d) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
3. The chief inspector of cipher shall have the right to:
a) Impose a warning;
b) A fine of up to VND 160,000,000 shall be imposed for acts of administrative violations of civil cryptography in the field of cyber information security;
c) Deprivation of the right to use the License or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
4. The Head of the Government Cipher Committee has the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for administrative violations of civil cryptography in the field of cyber information security;
c) Deprivation of the right to use licenses or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.".
5. Articles 115, 116, 117, 118, 119, 119a, 120 and 121 are amended as follows:
"Article 115. Sanctioning competence of Presidents of People's Committees at all levels
1. Presidents of People's Committees of communes, wards and special zones directly under provinces (hereinafter collectively referred to as communes) have the right to:
a) Impose a warning;
b) A fine of up to VND 100,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
2. Presidents of People's Committees of provinces and centrally-run cities (hereinafter collectively referred to as provincial level) have the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
Article 116. Sanctioning competence of the People's Police
1. People's Public Security soldiers on duty have the right to:
a) Impose a warning;
b) A fine of up to VND 20,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 8,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
2. Heads of company-level mobile police units have the right to:
a) Impose a warning;
b) A fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 16,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified at Points a, c, dd and e, Clause 1, Article 28 of the Law on Handling of Administrative Violations.
3. Heads of police stations, heads of police stations at border gates and export processing zones, heads of battalion-level mobile police units, station chiefs and team leaders have the right to:
a) Impose a warning;
b) A fine of up to VND 60,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 24,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified at Points a, c, dd and e, Clause 1, Article 28 of the Law on Handling of Administrative Violations.
4. Commune-level police chiefs; Head of the International Airport Border Gate Police; Head of the Professional Department of the Department of Internal Security; Head of the Professional Department of the Department of Internal Political Security; Head of the Professional Division of the Police Department for Administrative Management of Social Order; Head of the Operations Department of the Traffic Police Department; Head of the Professional Department of the Department of Cyber Security and High-tech Crime Prevention and Control; Head of the Professional Department of the Immigration Department; Heads of professional departments of the National Data Center; Heads of regiment-level Mobile Police units; Heads of provincial-level Public Security Divisions include: Heads of Internal Security Divisions, Heads of Internal Political Security Divisions, Heads of Police Divisions for Administrative Management of Social Order, Heads of Police Divisions for Investigation of Crimes Against Social Order, Heads of Police Divisions for Investigation of Corruption-related Crimes, economic, smuggling, and environment, the Head of the Traffic Police Division, the Head of the Mobile Police Division, the Head of the Cyber Security and High-tech Crime Prevention and Combat Division, the Head of the Economic Security Division, and the Head of the External Security Division have the right to:
a) Impose a warning;
b) A fine of up to VND 160,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 64,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
5. The head of the Immigration Management Division of the provincial-level police is competent to impose sanctions under the provisions of Clause 4 of this Article and has the right to decide on the application of the sanction of expulsion.
6. Directors of provincial-level Police have the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the sanction of expulsion;
e) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
7. The Director of the Department of Internal Political Security, the Director of the Department of Economic Security, the Director of the Police Department for Administrative Management of Social Order, the Director of the Police Department for Investigation of Crimes against Social Order, the Director of the Police Department for Investigation of Corruption-related Crimes, the Director of the Traffic Police Department, the Director of the Police Department for Prevention and Combat of Environmental Crimes, the Director of the Department of Cyber Security and High-tech Crime Prevention and Control, the Director of the Department of Internal Security, the Commander of the Mobile Police, and the Director of the National Data Center have the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
8. The Director of the Immigration Department is competent to impose sanctions under the provisions of Clause 7 of this Article and has the right to decide on the application of expulsion sanctions.
Article 117. Sanctioning competence of the Border Guard
1. Border Guard soldiers on duty have the right to:
a) Impose a warning;
b) A fine of up to VND 10,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 4,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
2. Station chiefs and team leaders of the persons specified in Clause 1 of this Article have the right to:
a) Impose a warning;
b) A fine of up to VND 20,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 8,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified at Points a, c, dd and e, Clause 1, Article 28 of the Law on Handling of Administrative Violations.
3. The leader of the Drug and Crime Prevention Task Force of the Drug and Crime Prevention Task Force shall have the right to:
a) Impose a warning;
b) A fine of up to VND 30,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; impose fines of up to VND 12,000,000 for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified at Points a, c, dd and e, Clause 1, Article 28 of the Law on Handling of Administrative Violations.
4. Commanders of border guard stations, commanders of border guard flotillas, and commanders of border guard commands of ports have the right to:
a) Impose a warning;
b) A fine of up to VND 60,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 24,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
5. The head of the Drug and Crime Prevention Task Force of the Drug and Crime Prevention and Control Department of the Border Guard Command has the right to:
a) Impose a warning;
b) A fine of up to VND 100,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
6. The Commander of the Border Guard Command; The Commander of the Border Guard Squadron and the Director of the Drug and Crime Prevention Department of the Border Guard Command have the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
Article 118. Sanctioning competence of the Coast Guard
1. Coast Guard officers on duty have the right to:
a) Impose a warning;
b) A fine of up to VND 10,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 4,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
2. The head of the Coast Guard professional team has the right to:
a) Impose a warning;
b) A fine of up to VND 20,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 8,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
3. Captains of Coast Guard professional teams and chiefs of Coast Guard stations have the right to:
a) Impose a warning;
b) A fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 16,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified at Points a, c, dd and e, Clause 1, Article 28 of the Law on Handling of Administrative Violations.
4. The commander of the Coast Guard flotilla has the right to:
a) Impose a warning;
b) A fine of up to VND 60,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 24,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified at Points a, c, d, dd, e, i and k, Clause 1, Article 28 of the Law on Handling of Administrative Violations.
5. Commander of the Coast Guard Fleet; Heads of reconnaissance teams and heads of drug crime prevention and combat teams of the Vietnam Coast Guard have the right to:
a) Impose a warning;
b) A fine of up to VND 100,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified at Points a, c, d, dd, e, i and k, Clause 1, Article 28 of the Law on Handling of Administrative Violations.
6. The Commander of the Coast Guard Region, the Director of the Department of Operations and Law of the Vietnam Coast Guard shall have the right to:
a) Impose a warning;
b) A fine of up to VND 160,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 64,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
7. The Commander of the Vietnam Coast Guard has the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Deprivation of the right to use licenses or practice certificates for a definite period or suspension of operation for a definite time;
d) Confiscation of material evidences and means used in administrative violations;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
Article 119. Authority of Market Management
1. Market controllers on duty have the right to:
a) Impose a warning;
b) A fine of up to VND 20,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 8,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
2. The head of the Market Surveillance Team of the Market Surveillance Sub-Department of the Department of Industry and Trade has the right to:
a) Impose a warning;
b) A fine of up to VND 60,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency, information technology and network information security; a fine of up to VND 24,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
3. The Director of the Sub-Department of Market Surveillance and the Head of the Market Surveillance Operations Division of the Domestic Market Surveillance and Development Department have the right to:
a) Impose a warning;
b) A fine of up to VND 100,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency and information technology; a fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations;
d) Deprivation of the right to use licenses or practice certificates for a definite term or suspension of operation for a definite time;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
4. The Director of the Domestic Market Surveillance and Development Department shall have the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations;
d) Deprivation of the right to use licenses or practice certificates for a definite term or suspension of operation for a definite time;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
Article 119a. Competence of Customs
1. Customs officers on duty have the right to:
a) Impose a warning;
b) A fine of up to VND 10,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequencies and information technology; a fine of up to VND 4,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause.
2. Heads of border-gate/non-border-gate customs teams, heads of post-customs clearance review and inspection teams, heads of customs clearance teams, heads of customs control teams of regional Customs Sub-departments, heads of anti-smuggling control teams of anti-smuggling investigation sub-departments; The leader of the regional post-customs clearance inspection team of the Sub-Department of Post-Customs Clearance Inspection has the right to:
a) Impose a warning;
b) A fine of up to VND 60,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequencies and information technology; a fine of up to VND 24,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations with a value not exceeding 02 times the fine level specified at Point b of this Clause;
d) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
3. Directors of Anti-Smuggling Investigation Sub-Departments, Directors of Post-Customs Clearance Inspection Sub-Departments and Directors of Regional Customs Sub-Departments have the right to:
a) Impose a warning;
b) A fine of up to VND 100,000,000 shall be imposed for acts of administrative violation in the field of telecommunications, radio frequency and information technology; a fine of up to VND 40,000,000 shall be imposed for acts of administrative violation in the field of post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations;
d) Deprivation of the right to use licenses or practice certificates for a definite term or suspension of operation for a definite time;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
4. The Director of the Customs Department has the right to:
a) Impose a warning;
b) Impose fines up to the maximum level for acts of administrative violation in the field of telecommunications, radio frequency, information technology, network information security, post and electronic transactions;
c) Confiscate material evidences and means used in administrative violations;
d) Deprivation of the right to use licenses or practice certificates for a definite term or suspension of operation for a definite time;
dd) Apply the remedial measures specified in Clause 1, Article 28 of the Law on Handling of Administrative Violations.
Article 120. Delimitation of authority
1. Presidents of People's Committees at all levels are competent to sanction administrative violations and apply remedial measures for acts of administrative violation specified in this Decree, except for the violations specified in Clause 8, Article 14; Clauses 2 and 3 of Article 19; Clause 3, Article 77 and Article 80 according to the competence specified in Article 115 of this Decree and the assigned functions, tasks and powers.
2. Persons with sanctioning competence of the People's Police shall have the competence to sanction administrative violations and apply remedial measures for acts of administrative violation specified in Articles 5, 6, 7, 8, 9, 10, 11, 12 and 13; Clauses 1, 2, 3, 4, 5, 6 and 8 of Article 14; Clauses 1, 2 and 3 of Article 15; Clauses 1, 2, 3 and 4 of Article 16; Article 17; Clause 1 of Article 18; Clauses 2 and 3 of Article 19; Articles 20 and 21; Clauses 1 and 2 of Article 23; Clause 1 of Article 24; Clauses 1, 2, 3, 4 and 5 of Article 25; Clauses 1, 2 and 3 of Article 26; Clause 1 of Article 27; Articles 28, 29, 30, 31 and 32; Clauses 1, 2, 3, 4, 5, 6, 7, 8, 9, 11 and 12 of Article 33; Clauses 1, 2 and 3 of Article 34; Articles 35, 36, 37, 38, 39, 40 and 41; Clauses 1, 2, 3 and 4 of Article 42; Clause 1 of Article 43; Articles 44, 45, 46 and 47; Clauses 1 and 2 of Article 48; Clause 1 of Article 49; Articles 50 and 51; Clauses 1 and 2 of Article 52; Articles 53 and 54; Clauses 1, 2 and 3 of Article 55; Articles 56 and 57; Clauses 1, 2, 3, 4, 5 and 6 of Article 58; Clause 1 of Article 59; Articles 61, 62 and 63; Clauses 1, 2 and 4 of Article 64; Articles 65, 66 and 67, 69, 70, 71, 72 and 73; Clauses 1, 2 and 3 of Article 74; Articles 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91, 92, 93, 93a and 93b; Clauses 1, 2, 3, 4, 5, 6 and 7 of Article 94; Clauses 1, 2 and 3 of Article 95; Clauses 1, 2, 3 and 4 of Article 96; Articles 98, 99, 100, 101 and 102; Clauses 1, 2, 3, 4, 5 and 6 of Article 103; Clauses 1, 2, 3, 4 and 5 of Article 104; Articles 105 and 106; Clauses 1, 2, 3 and 4 of Article 107; Clause 1 of Article 108; Clauses 1, 2, 3 and 4 of Article 109; Clause 1 of Article 110; Clauses 1, 2 and 3 of Article 111; Clauses 1 and 2 of Article 112; Article 113 of this Decree according to the competence specified in Article 116 of this Decree and the assigned functions, tasks and powers.
The head of the Immigration Management Division of the provincial-level Police Department, the Director of the provincial-level Police and the Director of the Immigration Department have the right to sanction administrative violations and decide on the application of the sanctioning form of expulsion specified in this Decree.
3. Persons with sanctioning competence of the Border Guard shall have the competence to sanction administrative violations and apply remedial measures for acts of administrative violation specified in this Decree, except for the violations specified in Clause 8, Article 14; Clauses 2 and 3, Article 19; Clause 2, Article 51; Clauses 2 and 4, Article 64; Article 67; Clauses 2 and 3, Article 68; Clauses 2 and 3, Article 69; Clauses 2 and 3, Article 70; Clause 3, Article 77; Article 80 according to the competence specified in Article 117 of this Decree within the scope and domains under their management and their assigned functions, tasks and powers.
4. Persons with sanctioning competence of the Coast Guard shall have the competence to sanction administrative violations and apply remedial measures for acts of administrative violation specified in this Decree, except for the violations specified in Clause 8, Article 14; Clauses 2 and 3 of Article 19; Clause 2, Article 51; Clauses 2 and 4 of Article 64; Article 67; Clauses 2 and 3 of Article 68; Clauses 2 and 3 of Article 69; Clauses 2 and 3 of Article 70; Clause 3, Article 77; Article 80 according to the competence specified in Article 118 of this Decree and its assigned functions, tasks and powers.
5. Persons with sanctioning competence of customs offices are competent to sanction administrative violations and apply remedial measures for acts of administrative violation specified in Articles 5, 6, 7, 8, 9, 10 and 11; Clauses 1 and 2, Point b, Clause 3, Article 12; Article 13; Clauses 1, 2, 3, 4, 5, 6 and 7 of Article 14; Article 15; Clauses 1, 2, 3 and 4 of Article 16; Article 17; Clause 1, Article 18; Clause 1, Article 19; Articles 20 and 21; Clause 1, Article 22; Article 23; Clause 1, Article 24; Clauses 1, 2, 3, 4, 5, 7 and 8 of Article 25; Clauses 1, 2 and 3, Points a, b, c, dd and e, Clause 4, Points a and b, Clause 5, Point a, Clause 6, Article 26; Articles 27, 28, 29, 30, 31 and 32; Clauses 1, 2, 3, 4, 5, 6, 7, 8, 9, 11 and 12 Article 33; Articles 34, 35, 36, 37, 38, 39, 40 and 41; Clauses 1 and 2, Points c, d and dd Clause 3, Point c Clause 4, Points b and c Clause 5 Article 42; Articles 43, 44, 45, 46 and 47; Clause 1, Point dd, Clause 2, Clause 3, Article 48; Articles 49 and 50; Clauses 1 and 3 of Article 51; Articles 52, 53, 54, 55, 56, 57 and 58; Clause 1, Points b and c, Clause 2, Article 59; Points b and c, Clause 1, Article 60; Clauses 1 and 2, Point b, Clause 3, Clause 4, Article 62; Articles 63, 64, 65 and 66; Clause 1, Article 68; Clauses 1 and 4 of Article 69; Clause 1, Article 70; Articles 71, 72, 73 and 74; Clause 1, Article 75; Article 76; Clauses 1 and 2 of Article 77; Articles 78, 79, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91, 92, 93, 93a, 93b and 94; Clauses 1, 2 and 3 of Article 95; Clauses 1, 2, 3 and 4 of Article 96; Articles 98, 99, 100, 101, 102 and 103; Clauses 1, 2, 3, 4 and 5 of Article 104; Articles 105 and 106; Chapters VI and VII of this Decree according to the competence specified in Article 119a of this Decree and their assigned functions, tasks and powers.
6. Persons with sanctioning competence of the Inspectorate shall have the competence to sanction administrative violations and apply remedial measures for acts of administrative violation specified in this Decree, except for the violations specified in Clause 8, Article 14; Clauses 2 and 3 of Article 19; Clause 3, Article 77; Article 80 according to the competence specified in Article 114 of this Decree and the assigned functions, tasks and powers.
7. Persons with sanctioning competence of Market Surveillance are competent to sanction administrative violations and apply remedial measures for acts of administrative violation specified in this Decree, except for the violations specified in Clause 8, Article 14; Clauses 2 and 3 of Article 19; Clause 3, Article 77; Article 80 according to the competence specified in Article 119 of this Decree and the assigned functions, tasks and powers.
8. The coordination between agencies in sanctioning administrative violations in the fields of post, telecommunications, radio frequency, information technology, cyber information security and electronic transactions shall comply with the provisions of Article 52 of the Law on Handling of Administrative Violations.
Article 121. Competence to make records of administrative violations
The titles specified in Articles 114, 114a, 115, 116, 117, 118, 119 and 119a of this Decree, civil servants, public employees, persons of the People's Army, People's Police, persons doing key work who are performing their assigned official duties, tasks and powers in the field of post, telecommunications, radio frequency, information technology, network information security and electronic transactions have the right to make records of administrative violations according to regulations.".
Article 12. Enforcement effect
1. This Decree takes effect from September 9, 2025.
2. The Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and the export and import of civil cryptographic products; Decree No. 53/2018/ND-CP dated April 16, 2018 of the Government amending and supplementing the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and the export and import of civil cryptographic products and the Government's Decree No. 32/2023/ND-CP dated June 09, 2023 amending and supplementing the Government's Decree No. 53/2018/ND-CP dated April 16, 2018 amending and supplementing the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and the export and import of civil cryptographic products expires from the effective date of this Decree.
Article 13. Transitional Regulations
1. Enterprises trading in civil cryptographic products and services that have been granted licenses for trading in civil cryptographic products and services under the provisions of the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and exports, import of civil cryptographic products; Decree No. 53/2018/ND-CP dated April 16, 2018 of the Government amending and supplementing the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and the export and import of civil cryptographic products and the Government's Decree No. 32/2023/ND-CP dated June 09, 2023 amending and supplementing the Government's Decree No. 53/2018/ND-CP dated April 16, 2018 amending and supplementing the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and the export and import of civil cryptographic products that are still valid, they do not have to redo the licensing procedures trading in civil cryptographic products and services. Within 30 days before the expiration of the license, the enterprise must carry out procedures for applying for a license under this Decree.
2. If the license for export or import of civil cryptographic products has been granted to an enterprise before the effective date of this Decree and the name of the product is consistent with the description of goods on the list of goods exported or imported into Vietnam, customs procedures shall continue to be carried out according to the time limit stated in the license. Customs offices shall base themselves on the list of Vietnamese exports and imports, the granted licenses for export and import of civil cryptographic products and the actual exports and imports to determine HS codes and carry out customs clearance procedures as prescribed.
3. Dossiers of application for new, amendment, supplementation, re-issuance or extension have been received by the Government Cipher Committee at the time of the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and exports, import of civil cryptographic products; Decree No. 53/2018/ND-CP dated April 16, 2018 of the Government amending and supplementing the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and the export and import of civil cryptographic products and the Government's Decree No. 32/2023/ND-CP dated June 09, 2023 amending and supplementing the Government's Decree No. 53/2018/ND-CP dated April 16, 2018 amending and supplementing the Government's Decree No. 58/2016/ND-CP dated July 01, 2016 detailing the trading of civil cryptographic products and services and the export and import of civil cryptographic products that are still valid but have not yet been settled, they may continue to implement the submissions, procedures and dossiers as prescribed in that Decree.
4. Dossiers of application for new, amendment, supplementation, re-grant or extension received by the Government Cipher Committee from the effective date of this Decree shall apply the processes, procedures and dossiers prescribed in this Decree.
Article 14. Enforcement responsibilities
Ministers, heads of ministerial-level agencies, heads of government-attached agencies, presidents of provincial-level People's Committees and relevant organizations and individuals shall be responsible for the implementation of this Decree./.
|
Recipients: | TM. GOVERNMENT |
LIST OF CIVIL CRYPTOGRAPHY PRODUCTS AND SERVICES(
Attached to the Government's Decree No. 211/2025/ND-CP dated July 25, 2025)
I. LIST OF CIVIL CRYPTOGRAPHY PRODUCTS
| TT | Product Name |
| 1 | Cryptographic key generation, management or storage of cryptographic keys. |
| 2 | Data retention security products. |
| 3 | The product secures the data exchanged on the network. |
| 4 | IP Stream Security Products. |
| 5 | Analog and digital voice security products. |
| 6 | Radio information security products. |
| 7 | Fax and telegraph security products. |
Explain:
1. Civil cryptography products are described as systems, devices, integrated modules and circuits, software specially designed to protect information by cryptography techniques using "symmetric cryptographic algorithms" or "asymmetric cryptographic algorithms".
2. The list of conditional business civil cryptographic products does not include the following products:
| TT | Product Name |
| 1 | Operating systems, Internet browsers, software that have been integrated with available cryptographic components (the function of protecting information by cryptographic techniques is not the main function), are widely used and are built for users to install themselves without support from the provider. |
| 2 | Information technology products are widely used, in which the function of protecting information by cryptography is not the main function and is pre-installed, without support from suppliers, including: Tablets, DVD players, digital cameras, other similar consumer electronic products. |
| 3 | Mobile phones are not capable of end-to-end encryption. |
| 4 | Smart cards and readers/writers are for general access only and are specially built, only capable of protecting personal information. |
| 5 | Copyright and proprietary protection products are designed to perform one of the following features: a) Anti-copying of software copyrights; b) Preventing access to protected means in a readable form; c) Preventing access to information stored in encrypted form on the media when the media is sold publicly; d) Prevent access to information stored for one-time copyright protection for audio/video data. |
| 6 | The product has a function that is only used for identity authentication, no encryption function. |
| 7 | The product uses cryptography techniques for remote access, device administration. |
| 8 | Retention hard drives use SED (Self-Encrypting Drive) encryption technology, which is widely used. |
| 9 | The product uses cryptography techniques for the purpose of monitoring, preventing and detecting cyber attacks. |
| 10 | The integrated circuit uses TPM (Trusted Platform Module) technology to identify devices, authenticate information, and protect passwords. |
| 11 | The product uses cryptographic techniques for the purpose of wireless access protection. |
| 12 | The product is specifically designed for end-end use only in the medical field. |
II. LIST OF CIVIL CRYPTOGRAPHY SERVICES
| TT | Service Name |
| 1 | Information protection services using civil cryptography products. |
| 2 | Inspection and evaluation services of civil cryptography products. |
| 3 | Cyber information security and security consulting services using civil cryptography products. |
LIST OF CIVIL CRYPTOGRAPHIC PRODUCTS EXPORTED AND IMPORTED UNDER LICENSES
(Attached to the Government's Decree No. 211/2025/ND-CP dated July 25, 2025)
| STT | Product Name | Description of cryptographic technical characteristics | HS Code | Description of goods |
| 1 | Cryptographic key generation, management or storage of cryptographic keys | - Products in the PKI system that use cryptography include: -- Hardware Security Module (HSM): has the function of generating cryptographic keys, storing and managing cryptographic keys, digital certificates, signing and checking digital signatures. -- PKI Token (PKI USBToken, PKI Smartcard, SimPKI): has the function of generating cryptographic keys, storing and managing cryptographic keys, digital certificates, signing and checking digital signatures. - Products with the function of generating cryptographic keys, managing or storing cryptographic keys that are not part of the PKI system. | 8471.30.90 8471.41.90 8471.49.90 8471.80.90 | Automatic data processing machines and their functional blocks; magnetic or optical readers, data transmission machines to data transmission media in encrypted form, and machines that process these data, which have not been detailed or recorded elsewhere, include: - Other types of goods are portable automatic data processing machines, weighing not more than 10 kg, including at least one central data processing unit, one keyboard and one monitor; - Other types of goods contained in the same container with at least one central processing unit, one importing unit and one exporting unit, combined or not combined; - Other, in the form of a system; - Other types of goods are other apparatus of automatic data processing machines. |
| 2 | Data Retention Security Products | The product uses cryptographic algorithms and cryptographic techniques to protect data stored on the device. | 8523.51.11 8523.51.21 8523.51.99 | Sustainable and solid-state storage devices of goods are disks, tapes, sustainable storage devices, solid-state devices, "smart cards" and other means of storing information for recording audio or other contents and forms of expression, whether or not recorded, including templates and originals for the production of tape recordings, but does not include products of photographic or cinematographic materials including: - The type used for computers of the unrecorded type; - The type used for computers of the type for the reproduction of phenomena other than sound or image; - Other types of goods belonging to headings 8523.51.11, 8523.51.21. |
| 8523.52.00 | - "Smart card". | |||
| 8542.32.00 | Memory of the integrated electronic circuit. | |||
| 3 | Network Exchange Data Security Products | The product uses cryptography algorithms and cryptography techniques to secure data transmitted and received in the network environment. | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and their functional blocks; data transmission machines to data transmission media in encrypted form and machines that process these data, which have not been detailed or recorded elsewhere, include: - Other types of goods are portable automatic data processing machines, weighing not more than 10 kg, including at least one central data processing unit, one keyboard and one monitor; - Other types of goods contained in the same container with at least one central processing unit, one importing unit and one exporting unit, combined or not combined; - Other, in the form of a system. |
| 8517.62.42 8517.62.43 8517.62.49 | Equipment used for carrier wired systems or digital wired systems of goods is receivers, exchangers and transmitters or reproduction of sound, images or other forms of data, including switching and routing equipment, including: - Concentrator or channel accumulator; - Controllers and adaptors, including gateways, bridges, routers, and other similar devices designed solely to connect to 84.71 automated data processors; - Other. | |||
|
|
| 8517.62.51 8517.62.53 8517.62.59 | Other transmission equipment in combination with the receiving equipment of goods is a receiver, exchanger and transmitter or reproduction of sound, image or other form of data, including switching equipment and router equipment, including: - Wireless intranet equipment; - Other transmitters used for telegraphy or telephone transmission in the form of radio waves; - Other. | |
| 8517.62.61 8517.62.69 8517.62.91 8517.62.92 8517.62.99 | Other transmission equipment of goods is a receiver, exchanger and transmitter or reproduction of sound, image or other forms of data, including switching equipment and router equipment, including: - Used for telegraphy or telephone transmission in the form of radio waves; - A type other than the type used for telegraphy or telephone transmission in the form of radio waves; - Other types are portable receivers for calling, signaling or messaging and message warning devices, including pagers; - Other types used for telegraphs or telephones transmitted in the form of radio waves; - Other types of goods belonging to headings 8517.62.61, 8517.62.69, 8517.62.91, 8517.62.92. | |||
| 4 | IP Stream Security Products | The product uses secure VPN technology (IPSec VPN, TLS VPN) to ensure the safety and security of data transmitted and received in the IP network environment. In particular, symmetrical encryption algorithms, asymmetric encryption algorithms, digital signing algorithms, cryptographic hash functions are used to secure and authenticate information transmitted and received in the IP network environment. | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and their functional blocks; data transmission machines to data transmission media in encrypted form and machines that process these data, which have not been detailed or recorded elsewhere, include: - Other types of goods are portable automatic data processing machines, weighing not more than 10 kg, including at least one central data processing unit, one keyboard and one monitor; - Other types of goods contained in the same container with at least one central processing unit, one importing unit and one exporting unit, combined or not combined; - Other, in the form of a system. |
| 8517.62.42 8517.62.43 8517.62.49 | Equipment used for carrier wired systems or digital wired systems of goods is receivers, exchangers and transmitters or reproduction of sound, images or other forms of data, including switching and routing equipment, including: - Concentrator or channel accumulator; - Controllers and adaptors, including gateways, bridges, routers, and other similar devices designed solely to connect to 84.71 automated data processors; - Other. | |||
| 8517.62.51 8517.62.53 8517.62.59 | Other transmission equipment in combination with receivers, exchangers and transmitters or reproduction of audio, images or other forms of data, including switches and routers, including: - Wireless intranet equipment; - Other transmitters used for telegraphy or telephone transmission in the form of radio waves; - Other. | |||
| 8517.62.61 8517.62.69 8517.62.91 8517.62.92 8517.62.99 | Other transmission equipment of receivers, exchanges and transmissions or reproduction of sounds, images or other forms of data, including switching equipment and router equipment, including: - Used for telegraphy or telephone transmission in the form of radio waves; - A type other than the type used for telegraphy or telephone transmission in the form of radio waves; - Other types are portable receivers for calling, signaling or messaging and message warning devices, including pagers; - Other types used for telegraphs or telephones transmitted in the form of radio waves; - Other types of goods belonging to headings 8517.62.61, 8517.62.69, 8517.62.91, 8517.62.92. | |||
| 5 | Analog and digital voice security products | The product uses security protocols (ZRTP, SRTP, WebRTC, SIPS) or VPN channels (IPSec, SSL/TLS, L2TP) for audio security; images and videos. In which, symmetrical encryption algorithms, asymmetric encryption algorithms, digital signature algorithms, cryptographic hash functions are used. | 8517.11.00 8517.13.00 8517.14.00 8517.18.00 | Telephone sets, including smartphones and other telephones for cellular or other wireless networks; other equipment for transmitting or receiving voice, images or other data, including telecommunications equipment connected to wired or wireless networks (such as those used in intranets or wide-area networks), except for transmitting or receiving equipment of heading 84.43, 85.25, 85.27 or 85.28, including: - Wired phone set with wireless handset; - Smartphones; - Telephones for cellular or other wireless networks; - Other. |
| 6 | Radio Information Security Products | The product uses cryptography algorithms and cryptography techniques to secure radio information data. | 8525.50.00 8525.60.00 | Transmitters used for radio or television broadcasting, whether or not attached to equipment for receiving or recording or reproducing sound; Television cameras, digital cameras and image recording cameras include: - Transmitters; - Transmitters attached to receivers. |
| 8526.91.10 8526.91.90 8526.92.00 | Radars, radio navigation devices and radio remote control devices include: - Radio navigation equipment, used on civil aircraft, or used only for seagoing ships; - Other types of goods are radio navigation devices; - Radio remote control equipment. | |||
| 7 | Fax and telegraph security products | The product uses cryptographic algorithms and cryptographic techniques to secure fax data, telegram data on the spot or on the transmission line. | 8443.31.31 8443.31.39 8443.31.91 8443.31.99 | The machine combines two or more printing, copying or fax functions, and is capable of connecting to an automatic data processing machine or a network connection, including: - The color type of the goods is a combined printer-copy-fax machine; - Other types of goods are combined printers, copy-fax machines; - Other types are combined printers-copy-scan-fax; - Other types of drugs of heading 8443.31.31, 8443.31.39, 8443.31.91. |
| 8443.32.40 | Other types of fax machines are capable of connecting to automatic data processing machines or network connections. |
FORM OF DOSSIER OF PROCEDURES FOR ISSUANCE OF BUSINESS LICENSE FOR CIVIL CRYPTOGRAPHIC PRODUCTS AND SERVICES, LICENSE FOR EXPORT AND IMPORT OF CIVIL
CRYPTOGRAPHIC PRODUCTS (Attached to the Government's Decree No. 211/2025/ND-CP dated July 25, 2025)
| Application for a license to trade in civil cryptographic products and services | |
| Application for amendment, supplementation/re-issuance/extension of the license to trade in civil cryptographic products and services | |
| Technical plan | |
| Business plan | |
| Cyber information security and safety plan | |
| License to trade in civil cryptographic products and services | |
| Application for an export/import license of civil cryptographic products | |
| License to export and import civil cryptographic products |
| (COMPANY NAME) | SOCIALIST REPUBLIC OF VIETNAM |
| Number:........... | ......day... month... year... |
Issuance of licenses for trading in civil cryptographic products and services
To: Government Cipher Committee.
Name of the enterprise applying for licensing (written in Vietnamese):........................
Name of the enterprise in a foreign language (if any): ............................
Abbreviated business name (if any):...................................................
Head Office Address:.....................................................................
Telephone:.....................................
Email:…………………………………….Website:……………………………
Business registration certificate/investment registration certificate/other papers of equivalent value:................................................................
DO:............................................issued on:...........................
Full name of the legal representative of the enterprise:......................
Duty:.................................................................................
ID number/ Personal identification number/Passport:.. ………………………………..
Issue Date........................ at......................................................
Request the Government Cipher Committee to grant a license to trade in civil cryptographic products and services as follows:
1. List of civil cryptographic products applying for business licensing
| STT | Product Group Name | Standards, technical characteristics | Scope and field of supply |
| 1 |
|
|
|
| 2 |
|
|
|
2. List of civil cryptographic services applied for business licensing
| STT | Service Name | Scope and field of supply |
| 1 |
|
|
| 2 |
|
|
I/we would like to take responsibility before the law for the accuracy of the information provided and commit to strictly comply with the regulations on trading in civil cryptographic products and services in the Law on Cyber Information Security.
|
| LEGAL REPRESENTATIVE OF THE ENTERPRISE |
| (COMPANY NAME) | SOCIALIST REPUBLIC OF VIETNAM |
| Number:........... | ......day... month... year... |
amending, supplementing/re-granting/extending licenses for trading in civil cryptographic products and services
To: Government Cipher Committee.
Name of the enterprise applying for a license (written in Vietnamese):...........................
Business name written in foreign language (if any):...........................
Abbreviated business name (if any):....................................................
Head Office Address:......................................................................
Telephone:...............................
Email:……………………………….Website:………………………….
Business registration certificate/investment registration certificate/other papers of equivalent value:........................................................... by:................................................. Issued Date:..........................................
License to trade in civil cryptographic products and services No.: ....................................... issued by the Government Cipher Committee Date:.........................
Full name of the legal representative of the enterprise:.....................
Duty:................................................................................
ID number/ Personal identification number/ Passport:............................... Issue Date........................ at....................
Reasons to recommend:.....................................................................
(clearly stating the reason for requesting amendment, supplementation/re-issuance/extension of the License)
Request the Government Cipher Committee
……………………………………………………………………..
(clearly stating the request for amendment, supplementation/re-issuance/extension of the License)
I/we would like to take responsibility before the law for the accuracy of the information provided and commit to strictly comply with the regulations on trading in civil cryptographic products and services in the Law on Cyber Information Security.
|
| LEGAL REPRESENTATIVE OF THE ENTERPRISE |
(Company Name)
(Enclosed with the application No. ... day.. month... year...)
I. LICENSED PRODUCTS
1. General Introduction
General introduction of the product to be licensed, including general information about the product; the functions and technical characteristics of the product.
2. Technical characteristics of cryptography
Clearly state the cryptographic algorithms and cryptographic parameters used in the product (referring to the results of assessment and certification of competent agencies and organizations for the cryptographic technical characteristics of the product).
3. Implementation model
Describe the product implementation model and general principles of using the product to secure and authenticate information in the system.
4. Configure cryptographic parameters
Describe the establishment and configuration of confidential parameters used in the product and reference documents (if any).
II. PLAN FOR WARRANTY AND MAINTENANCE OF CIVIL CRYPTOGRAPHIC PRODUCTS
1. Overview
2. Scope of warranty and maintenance
3. Warranty Process
4. Warranty Address
(Company Name)
(Enclosed with the application No. ... day.. month... year...)
I. Overview of the enterprise
1. About the business
Introduce general information and business activities of the enterprise.
2. Facilities
Describe the system, equipment and facilities of the enterprise.
3. Human Resources
Statistics of managerial, executive and technical teams (clearly stating information on the number and professional qualifications).
II. Plans for trading in civil cryptographic products and services
1. Scope and subjects of provision
Clearly state the scope, subjects and fields of provision of civil cryptography products and services.
2. Product and service business plan
Presenting the tentative business plan, scale and quantity of civil cryptography products and services.
III. Plans for quality assurance of civil cryptography products and services
Description of customer service system and technical assurance.
(Company Name)
CYBER INFORMATION SECURITY AND SAFETY PLAN
(Enclosed with the application No. ... day.. month... year...)
I. Data to be protected
Present sensitive data to be protected of individuals and organizations related to the management and provision of civil cryptography products and services that enterprises keep.
II. Security plan
Describe the professional and technical measures to protect sensitive data mentioned in Section I.
| GOVERNMENT CIPHER COMMITTEE | SOCIALIST REPUBLIC OF VIETNAM |
| Number: /GPKD-BCY | ......day... month... year... |
LICENSE TO TRADE IN CIVIL CRYPTOGRAPHY PRODUCTS AND SERVICES
HEAD OF THE GOVERNMENT CIPHER COMMITTEE
Pursuant to the Law on Cyber Information Security 2015;
Pursuant to Decree No...... day.... month..... 2025 of the Government regulating civil cryptography activities and amending and supplementing a number of articles of the Government's Decree No. 15/2020/ND-CP dated February 03, 2020 stipulating penalties for administrative violations in the field of post, telecommunications, radio frequency, etc information technology and electronic transactions are amended and supplemented a number of articles in Decree No. 14/2022/ND-CP dated January 27, 2022 of the Government;
Considering the dossier of application for issuance/amendment, supplementation/re-issuance/extension of the license to trade in civil cryptographic products and services........................1;
At the request of the Director of the Department of Civil Cryptography Management and Cryptography Product Inspection,
DECIDE:
Article 1. ……………………………………………………………….………………..1
Head Office Address:.............................................................................
Phone:.....................................................Fax:................................
Business Registration Certificate/Investment Registration Certificate No.:......... by............ issued on .... month.... year.......;
To trade in civil cryptographic products and services according to the List attached to this License.
Article 2. ……………….1 must strictly comply with the provisions of the Law on Cyber Information Security and Decree No......... day..... month..... in 2025 of the Government regulating civil cryptography activities.
Article 3. The license to trade in this civil cryptography product or service is valid from ... month... year... until the end of the day... month... year....; 2replacing the License for trading in civil cryptographic products and services No. ...../GPKD dated ... month... year... of the Head of the Government Cipher Committee./.
| Pick-up location: | HEAD OF THE GOVERNMENT CIPHER COMMITTEE |
LIST OF CIVIL CRYPTOGRAPHY PRODUCTS AND SERVICES PERMITTED TO BE TRADED
(Enclosed with the License for trading in civil cryptographic products and services No..../GPKD-BCY dated .... month... year... of the Government Cipher Committee)
1. List of civil cryptographic products permitted to be traded
| STT | Product Group Name | Standards, technical characteristics | Scope and field of supply |
| 1 |
|
|
|
| 2 |
|
|
|
2. List of civil cryptography services permitted to be traded
| STT | Service Name | Scope and field of supply |
| 1 |
|
|
| 2 |
|
|
______________________________
1 Licensed Business Name
2 Use in case of issuance, amendment, supplementation/re-issuance/extension of the License
| (COMPANY NAME) | SOCIALIST REPUBLIC OF VIETNAM |
| Number:............ | ......day... month... year... |
Issuance of licenses for export/import of civil cryptographic products
To: Government Cipher Committee
Name of the enterprise applying for licensing (written in Vietnamese):.............................
Name of the enterprise written in a foreign language (if any): .................................
Abbreviated business name (if any):............................................................
Head Office Address:.................................................................................
Telephone:.................................... Fax:....................................................
Email:……………………………...……….. Website:……………………………………
Business registration certificate/investment registration certificate/other papers of equivalent value:...........................................................................
DO:..................................issued on:.............................................
License to trade in digital civil cryptography products and services:................. issued by the Government Cipher Committee Date:.............................
Certificate of conformity of product No. ..........................................
DO:...........................................Issue Date.......................... (if any).
Request the Government Cipher Committee to grant a license to export civil cryptographic products/import licenses for civil cryptographic products according to the list attached to this application.
I/we would like to take responsibility before the law for the accuracy of the information provided and commit to strictly comply with the regulations on export and import of civil cryptographic products in the Law on Cyber Information Security.
|
| LEGAL REPRESENTATIVE OF THE ENTERPRISE |
LIST OF CIVIL CRYPTOGRAPHIC PRODUCTS APPLYING FOR EXPORT AND IMPORT LICENSING
(enclosed with the application for an export and import license for civil cryptographic products ... of...3)
| TT | Product Name | Company name | Model | HS Code | Country of origin | Year of manufacture | Amount | Standards and technical regulations4 | Specifications | Export/Import Purpose |
| 1 |
|
|
|
|
|
|
|
|
|
|
| 2 |
|
|
|
|
|
|
|
|
|
|
| … |
|
|
|
|
|
|
|
|
|
|
______________________________
3 Business name
4 Technical regulations only apply to import cases (if any)
| GOVERNMENT CIPHER COMMITTEE | SOCIALIST REPUBLIC OF VIETNAM |
| Number: /GPXNK-BCY | ......day... month... year... |
EXPORT AND IMPORT OF CIVIL CRYPTOGRAPHIC PRODUCTS
HEAD OF THE GOVERNMENT CIPHER COMMITTEE
Pursuant to the Law on Cyber Information Security 2015;
Pursuant to Decree No......... day.... month...... 2025 of the Government regulating civil cryptography activities and amending and supplementing a number of articles of the Government's Decree No. 15/2020/ND-CP dated February 03, 2020 stipulating penalties for administrative violations in the field of post, telecommunications, radio frequency, etc information technology and electronic transactions are amended and supplemented a number of articles in Decree No. 14/2022/ND-CP dated January 27, 2022 of the Government;
Considering the dossier of application for a license to export or import civil cryptographic products of the .....................5;
At the request of the Director of the Department of Civil Cryptography Management and Cryptography Product Inspection,
DECIDE:
Article 1. ……………………………………………………………………..5
Head Office Address:.................................................................
Telephone:............................................. Fax:...........................
Business Registration Certificate/Investment Registration Certificate No.:............... due to ................... date.... month.... year.....;
To export/import civil cryptographic products according to the List attached to this License.
Article 2. ……………5 must strictly comply with the provisions of the Law on Cyber Information Security and Decree No. ......... day..... month...... in 2025 of the Government regulating civil cryptography activities;
Article 3. This license for export and import of civil codes is valid until the end of the ... month... year....../.
| Recipient: | HEAD OF THE GOVERNMENT CIPHER COMMITTEE |
LIST OF CIVIL CRYPTOGRAPHY PRODUCTS EXPORTED/IMPORTED
(Enclosed with the License for export and import of civil cryptographic products No. .../GPXNK-BCY dated .... month... year... of the Government Cipher Committee)
| TT | Product Name | Company name | Model | HS Code | Country of origin | Year of manufacture | Amount | Standards and technical regulations6 | Specifications | Export/Import Purpose |
| 1 |
|
|
|
|
|
|
|
|
|
|
| 2 |
|
|
|
|
|
|
|
|
|
|
| 3 |
|
|
|
|
|
|
|
|
|
|
| … |
|
|
|
|
|
|
|
|
|
|
_____________________________
5 Business name
6 Technical regulations only apply to import cases (if any)
