Vietnam's Decree 320/2026/ND-CP was signed on 13 August 2026 and took effect on 28 September 2026. It amends Decree 69/2024/ND-CP on electronic identification and authentication, according to the official decree record on the government's legal portal. Secondary reporting says it requires electronic transaction accounts on digital platforms in twelve listed sectors to be linked to a VNeID account, the national app-based e-ID. The sectors include social networks and e-commerce sellers.
A caveat on sourcing. The official page I could open shows only the decree's header and metadata, not Article 19. The account-linking details below therefore rest on press and law-firm reporting. They are not on the decree text, which readers should check themselves.
The strongest case for the mandate
The regulator's case is real. Anonymous and bot-run accounts power fraud, impersonation and scam marketplaces, and a verified identity layer can cut those harms. The decree's stated purpose is a legal basis for integrating personal and organizational documents into one identification system, which cuts paperwork. Government news portal Báo Chính phủ says agencies may no longer demand copies of documents already integrated in the app. It lists 66 document types for individuals and 140 for organizations.
VNeID also has real reach. VietnamNet reported that by mid-2025 about 83.5 million people had registered and roughly 60 million had reached level 2, the verification tier used for online public services. Citizen-facing convenience, such as receiving pensions through the app, is a legitimate benefit.
What the decree reportedly requires
The Vietnamese Magazine reports that Article 19 covers twelve sectors:
- education
- the "digital literacy for all" campaign
- securities
- telecommunications
- banking
- e-commerce, including sellers, livestream sellers and affiliate marketers
- electronic invoices
- transport
- tourism
- pharmaceuticals
- medical examination and treatment
- social networks operating in Vietnam
Sources count the sectors differently. Saigon Giai Phong headlines eleven types with a 31 December 2026 deadline. It treats banking as the twelfth sector, on a separate deadline of 30 June 2027. Accounts created after 28 September must be linked from the start.
The same reporting says no penalty or restriction is set for accounts that stay unlinked after the deadline. That is a notable gap. A mandate with no stated sanction leaves enforcement to whatever platforms, ministries or later circulars decide. The only enforcement mechanism described in provincial government coverage is a different one. The Ha Tinh provincial portal says the system will automatically lock an e-ID account if the registered phone number does not match the subscriber's records.
Why undefined terms matter
The Vietnamese Magazine notes that the reporting does not define "digital platform," "electronic transaction account" or "authentication." It also says the "cross-border services" language is unclear. Other coverage describes cross-border and national-security-related accounts as needing linkage before use, if the platform is technically integrated. One local law-firm explainer cautions against reading the rule as requiring every Facebook or TikTok user to link personally. In practice the scope seems to depend on a platform's activity, not its name.
That ambiguity is a regulatory cost in itself. A foreign platform cannot know whether it is covered, a small seller cannot know whether livestream resale triggers the rule, and users cannot tell whether a deadline applies to them. Predictable rules are what let small firms comply. Vague ones favor the largest incumbents, who can afford lawyers and direct government channels.
Building on an existing identity layer
This is not Vietnam's first identity step for social media. Under Decree 147/2024, effective 25 December 2024, foreign providers with at least 100,000 monthly visits from Vietnam, or data storage rented there, must verify accounts by Vietnamese mobile number. A personal ID number is the fallback for users without one, and the rule applies to commercial livestreamers. Only verified accounts may post, comment, livestream or share.
Decree 320 moves the anchor from a phone number to a state-issued digital identity held in a government app. The difference matters. A phone number is a commercial identifier, while VNeID is a government-controlled credential. Linking the two means the state can, in principle, connect any covered account to a verified person.
Vietnamese police media has rejected the surveillance reading. The Vietnamese Magazine reports that the police newspaper Cong an Nhan dan called claims of total control distortions and said electronic identification "does not mean total surveillance." The same reporting recalls that President To Lam has argued identification would reduce fake and negative information online. Whether the system can be used that way depends on safeguards the decree's public summaries do not describe.
A proportionate path
A better design would narrow the mandate to where verified identity does clear work: regulated financial services, healthcare, and merchants handling payments. It would not extend to ordinary speech accounts. Four fixes would help:
- Publish definitions. Define a covered platform, account and authentication, and say how "cross-border" is determined.
- Name an accountable regulator. Set a clear complaint and appeal route for locked or unlinked accounts.
- Separate verification from disclosure. Platforms should receive a confirmation that a real person is behind an account, not the underlying identity record.
- Protect pseudonymous speech. Allow verified-but-pseudonymous public posting.
With the first deadline on 31 December 2026 about two and a half months away, platforms and sellers are being asked to plan against a rule whose edges are not public. The decree's convenience gains are real. Making linkage a precondition for ordinary online participation, without a published scope or a sanction schedule, is the part that fails a proportionality test.