Vietnam intermediary liability

Vietnam's Fake-News Decree Makes Platforms Enforcers of a State Verdict, With No Independent Check on Who Decides What Is False

Decree 328 lets ministries declare content false and obliges platforms to label and remove it, but the text sets no appeal route or independent review.

Vietnam's Decree Package at a Glance People of Internet Research · Vietnam 24 Hours to label content Platforms must label within 24 hou… 24/7 Platform focal point hours Article 22(2)(dd) requires a round… 3 hrs Urgent data request deadline Decree 333 sets 3 hours for urgent… peopleofinternet.com
Vietnam's Decree Package at a Glance People of Internet Research · Vietnam 24 Hours to label content 24/7 Platform focal point hours 3 hrs Urgent data request deadline peopleofinternet.com

Key Takeaways

On August 19, 2026, Vietnam's Government issued Decree 328/2026/ND-CP on preventing and combating fake news and false information. It takes effect on October 5, 2026, according to the Government's legal document portal. Two other decrees issued the same day matter just as much for platforms: Decree 327/2026/ND-CP and Decree 333/2026/ND-CP. Together they form a package that changes how an intermediary in Vietnam is expected to behave.

The strongest case for the decree

The regulators' argument deserves a fair hearing. Coordinated falsehoods can do real harm: fraud, panic during disasters, and harassment of private individuals. Vietnamese officials say platforms have been slow and inconsistent in responding to takedown requests. A published procedure with named responsible agencies, a defined label and a fixed contact point is arguably more predictable than the informal pressure it replaces. Decree 328 also sets out a classification of harm and, on the text reviewed, imposes no direct financial penalties on platforms.

That is a real design choice, and it is more restrained than some drafts were reported to be.

What the decree actually does

According to the English translation of the decree text, the mechanism has four parts:

The critical feature is the sequencing. The agency that decides content is false is a government body, and the platform's duty is triggered by that decision, not by any independent finding. The platform is not asked to judge truth. It is asked to execute a verdict.

The companion decrees raise the stakes

Decree 328 is described as lacking financial penalties, but that does not make it toothless. Decree 327/2026/ND-CP, which implements Article 14 of the Cybersecurity Law, provides that access can be blocked to foreign information systems that have no local branch or representative office, refuse local data storage, or refuse to remove illegal content, as VnEconomy reported. Decree 333 separately sets a three-hour limit for urgent IP-identification requests.

The sanction for ignoring a Decree 328 label therefore sits elsewhere in the package. A platform that declines to remove content labelled false by a ministry risks being characterised as refusing to remove illegal content, which is a stated trigger for blocking. Whether that link is used in practice is unknown, but the leverage exists on paper. For a platform with Vietnamese users, an absent fine is a weaker reassurance than it first appears.

Deadlines sit in different decrees

The deadlines are spread across instruments, and readers should not conflate them. Rajah & Tann states that under Decree 327 unlawful information generally must be removed within 24 hours, or six hours in an emergency, on requests from the cybersecurity force. It attributes a separate 24-hour block-or-remove duty to Decree 333. The Decree 328 text reviewed for this article prescribes no numeric removal deadline and requires removal only promptly; its only stated clock is the 24-hour labeling period. Platforms will have to reconcile three instruments with overlapping triggers, and a mistake in reading which clock applies could look like non-compliance.

Why the design is a problem for speech and innovation

The difficulty is not that Vietnam wants to address falsehood. It is that the design leaves out the safeguards that make notice-and-takedown tolerable elsewhere.

Brazil offers a useful contrast, even though its regime has its own flaws. The EFF's analysis of Brazil's implementation of the Supreme Court's intermediary-liability decision notes that platforms must notify both the requester and the content creator, explain their decisions, and allow appeals with the possibility of reinstatement. Even so, EFF warns of over-censorship risks and of duty-of-care standards whose limits are unclear. If a regime with those procedural protections draws that criticism, one that puts verification in the hands of the executive branch deserves closer scrutiny. The provisions cited above do not mention user notification, an appeal, or a route to correct an agency's mistake.

Three consequences follow.

A proportionate alternative

A pro-innovation approach would keep the useful parts. A named contact point and a standard label are reasonable. What should change is who decides and what happens when they are wrong. Concretely:

October 5 is the date to watch. Until implementing practice emerges, the honest assessment is that Decree 328 does not itself set penalties, but the package around it supplies the enforcement. A fact-checking system with no check on the fact-checker is a censorship tool, however accurate its individual labels may be.

Sources & Citations

  1. Vietnam Government portal: Decree 328/2026/ND-CP
  2. Decree 328/2026/ND-CP English text (LuatVietnam)
  3. VnEconomy: Vietnam to block non-compliant foreign platforms
  4. Rajah & Tann: Vietnam's seven cybersecurity decrees
  5. EFF: Intermediary Liability in Brazil