In Vietnam’s rapidly evolving digital economy, data security is a crucial concern; however, many small and medium-sized enterprises (SMEs) struggle to comply with data protection regulations due to limited resources and expertise. The 2024 Annual Report by the Authority of Information Security (AIS) under the Ministry of Information and Communications (MIC) reveals that over 70% of SMEs lack comprehensive data protection measures, exposing them to cyber threats and regulatory risks.

With the introduction of Decree No. 13/2023/ND-CP on Personal Data Protection and Law No. 60/2024/QH15 on Data, the Vietnamese government intends to enhance data security compliance. This article explores the key challenges SMEs face in managing data and how the new legal framework is poised to reshape the regulatory landscape.