STATUS: AMBER
M
Living Scenario

Data-transfer approvals / localization requirements emerge

Current probability
46%
Prior
32%
▲ +14pp
Trend
Rising
Preparedness
low-medium

Preparation, not capital commitment — evidence supports readiness posture.

Drivers
  • Draft Data Security Law
  • PDPL enforcement maturity
  • Cybersecurity Law overlap
Recommendations
  • Fund full Vietnam data-flow mapping (30 days)
  • Design local fallback architecture at concept stage (60 days)
  • Hold on capital commitment to local hosting until evidence firms
Scenario Timeline
2026-07
Draft circulation
2026-12
Enforcement scoping
2027-06
Possible transfer-approval regime
Contingency Plan

Local fallback for shipment visibility, HR, security data; approvals workflow with Legal.

Assessment
Impacthigh
TrendRising
Preparednesslow-medium
OwnersLegal · IT · Security
Contributing Signals
S-008 · 2026-07-09
Draft Data Security Law circulates
S-009 · 2026-07-13
PDPL enforcement staffing expands
Alternative Interpretations
  • ▹ Slower rollout — implementation may lag rulemaking by 6+ months
  • ▹ Selective enforcement — largest exporters absorb burden first
  • ▹ Reversal — political feedback softens digital-customs edge
Owners & Deadlines
LegalITSecurity