Every Information System in Việt Nam Gets a Security Level: Nghị định 331/2026/NĐ-CP Replaces the 2016 Rules
Nghị định 331/2026/NĐ-CP, in force since 19 August 2026, rewrites Việt Nam's five-level classification of information systems under the new Luật An ninh mạng — a 100,000-data-subject line between Level 2 and Level 3, Bộ Công an taking over assessment of Levels 4 and 5, 24-hour incident notices, and a 1 January 2027 deadline to get existing systems classified.




