Vietnam Recording Laws: Consent Rules and Penalties (2026)

Overview of Recording Laws in Vietnam

Vietnam prohibits the unauthorized recording, interception, or monitoring of private communications. The legal framework draws from several overlapping sources: the 2013 Constitution, the 2015 Penal Code, the 2015 Civil Code, the 2018 Cybersecurity Law, and the landmark Personal Data Protection Law (Law No. 91/2025/QH15) that took effect on January 1, 2026.

The central principle across all of these laws is consent. Recording a phone call, intercepting electronic messages, or capturing a private conversation without the knowledge and agreement of the people involved violates Vietnamese law. Unlike some countries that allow one-party consent (where only one participant needs to agree), Vietnam's legal framework leans toward requiring consent from all parties to a private communication.

This matters for anyone living in, visiting, or conducting business in Vietnam. Foreign nationals and multinational companies are subject to these laws while operating within Vietnamese territory, and the 2025 PDPL extends its reach to foreign entities processing the personal data of Vietnamese citizens.

Constitutional Foundation: Article 21

The 2013 Constitution of Vietnam provides the bedrock for all recording and privacy laws in the country. Article 21 states:

Paragraph 1: "Everyone has the right to inviolability of private life, personal secrets and family secrets; and has the right to protect his or her honor and reputation."

Paragraph 2: "Everyone has the right to privacy of correspondence, telephone conversations, telegrams and other forms of private communication. No one may illegally break into, control or seize another's correspondence, telephone conversations, telegrams or other forms of private communication."

This constitutional language is broad. It covers telephone conversations, electronic data, postal mail, and any other form of private communication. The phrase "no one may illegally break into, control or seize" has been interpreted by Vietnamese courts and legislators as prohibiting unauthorized recording, interception, and monitoring of private communications.

Because this protection sits at the constitutional level, it overrides conflicting provisions in lower-ranking legislation and serves as the interpretive lens through which Vietnamese courts evaluate recording disputes.

Penal Code Article 159: Criminal Penalties for Unauthorized Recording

The 2015 Penal Code (Law No. 100/2015/QH13), Article 159, criminalizes the infringement of confidentiality or safety of correspondence, telephone conversations, telegrams, and other forms of private communication.

Prohibited Conduct Under Article 159

Article 159 covers a range of activities:

• Appropriating another person's mail, telegraphs, telex, or fax communications
• Deliberately damaging, losing, or obtaining transmitted documents
• Listening to or recording telephone conversations without legal authorization
• Unlawfully searching or confiscating mail, telegraphs, or electronic communications
• Any other acts that violate the secrecy of private communications

The scope is wide. It reaches beyond telephone wiretapping to cover email interception, reading private messages, and accessing electronic data without authorization.

Penalties for First-Offense Violations

A person convicted under Article 159 for a first offense faces:

Penalty Type	Range
Warning	Formal judicial warning
Fine	VND 20,000,000 to 50,000,000 (approximately USD 770 to USD 1,920)
Community service	Up to 3 years of non-custodial reform
Supplementary fine	VND 5,000,000 to 20,000,000
Position ban	Prohibited from holding certain positions for 1 to 5 years

Aggravated Penalties

When the violation involves aggravating circumstances, penalties increase significantly. Aggravating factors include:

• Committing the offense as part of an organized group
• Abusing a position of authority or power
• Committing the offense more than once
• Causing damage to the victim's reputation
• Causing the victim to attempt or commit suicide

Under aggravated circumstances, the offender faces 1 to 3 years of imprisonment.

Civil Code Article 38: Privacy as a Civil Right

Article 38 of the 2015 Civil Code establishes privacy as a "personality right" under Vietnamese civil law. This gives individuals a private cause of action against anyone who violates their communication privacy.

Key Provisions of Article 38

The article states that private life, personal secrets, and family secrets are "inviolable and protected by law." Specifically:

• The collection, retention, use, and disclosure of information relating to private life and personal secrets requires the consent of the individual concerned.
• Correspondence, telephone conversations, telegrams, electronic data, and other private communications are protected and kept confidential.
• The collection, retention, use, and disclosure of information relating to family secrets requires consent from all family members, except where law provides otherwise.

For recording purposes, this means that capturing someone's private conversation, storing that recording, or sharing it with others without consent exposes the person who made the recording to civil liability. Victims can pursue damages in Vietnamese civil courts.

Personal Data Protection Law (2025 PDPL)

Vietnam's most significant recent development in recording and privacy law is the Personal Data Protection Law (Law No. 91/2025/QH15), which took effect on January 1, 2026. This law replaced the earlier framework established by Decree 13/2023/ND-CP and introduced substantial new requirements.

Consent Requirements Under the PDPL

Article 9 of the PDPL requires that consent for processing personal data must be:

• Voluntary (not coerced or bundled with unrelated services)
• Specific (tied to a particular processing purpose)
• Fully informed (the individual understands what data is collected and why)
• Provided separately for each processing purpose

Recording someone's voice or capturing their image constitutes personal data processing under this law. Any recording that captures personal data requires prior consent meeting all four criteria.

Article 29: Social Media and Online Communication Platforms

Article 29 targets technology companies and social media platforms operating in Vietnam. It prohibits organizations and individuals providing social network services and online communication services from:

• Eavesdropping on users
• Wiretapping or recording phone calls without user consent
• Reading text messages without user consent
• Collecting personal data beyond the scope agreed upon with the user
• Requesting images or videos of identification documents for account verification
• Tracking user activity without providing opt-out mechanisms

This provision directly addresses concerns about smartphone apps and communication platforms that may access microphones, record calls, or monitor messaging activity without clear user authorization.

Administrative Penalties Under the PDPL

The PDPL introduced a tiered penalty structure:

Violation Type	Maximum Penalty
General data protection violations	VND 3 billion (approximately USD 115,000)
Cross-border data transfer violations	5% of the entity's annual revenue from the preceding fiscal year
Illegal sale or purchase of personal data	Up to 10 times the unlawful proceeds

These penalties apply to organizations. Individual violators may face additional criminal liability under the Penal Code provisions described above.

Recording Phone Calls in Vietnam

Recording a phone call in Vietnam without the consent of all parties to the call violates multiple laws simultaneously. The 2013 Constitution protects the privacy of telephone conversations. Article 159 of the Penal Code criminalizes "listening to or recording conversations against the law." And the PDPL requires informed, voluntary consent before capturing personal data, which includes voice recordings.

There is no "one-party consent" exception in Vietnamese law. A participant in a phone call cannot legally record that call without informing and obtaining agreement from the other participants. This contrasts with countries like the United States, where many states allow one-party consent recording.

Exceptions

Vietnamese law does permit recording of communications in limited circumstances:

• Law enforcement: Competent state authorities can authorize the monitoring of private communications as part of criminal investigations, subject to procedural safeguards.
• National security: The Cybersecurity Law 2018 and related regulations grant security agencies authority to monitor communications when national security interests are at stake.
• Court-ordered surveillance: A judge or prosecutor can authorize wiretapping or recording in connection with specific criminal proceedings.

Outside of these narrow exceptions, recording phone calls without all-party consent remains illegal.

Recording In-Person Conversations

The same legal principles that govern phone recordings apply to in-person conversations in Vietnam. Article 21 of the Constitution protects "private life" and "personal secrets" broadly, not just telephone communications. Article 38 of the Civil Code protects "private communications" without limiting the term to electronic or telephone communications.

Recording a private, face-to-face conversation without the knowledge and consent of all participants carries the same legal risks as recording a phone call: potential criminal liability under Article 159, civil liability under Article 38, and administrative penalties under the PDPL if personal data is captured.

Public Spaces

The analysis changes somewhat in public settings. Vietnamese law distinguishes between private communications and activities that take place in public view. The PDPL contains provisions regarding audio and video recording in public places, with sector-specific safeguards.

Generally, recording in a public space where people have a reduced expectation of privacy carries less legal risk than recording a private conversation. Security cameras in businesses and public areas are regulated primarily through technical standards (such as Circular QCVN 135:2024/BTTTT for IP cameras) rather than outright prohibition.

That said, even in public spaces, deliberately targeting an individual to record their private conversation or capture their personal data without consent could trigger liability under the PDPL and Civil Code.

Workplace Recording and Employee Monitoring

Vietnam's Labor Code gives employers the authority to monitor employees in the workplace to ensure compliance with internal labor regulations (ILRs). However, this authority is not unlimited, and the PDPL has narrowed the scope of permissible workplace surveillance.

What Employers Can Do

Employers in Vietnam can:

• Install security cameras in common work areas (with appropriate notice)
• Monitor company-owned computer and internet usage
• Block access to specific websites on company networks
• Use time-tracking and attendance systems

What Requires Explicit Consent

The PDPL requires explicit consent from employees before an employer can:

• Use fingerprint or facial-recognition timekeeping systems
• Collect employee health information
• Track employee locations via company vehicles or work devices
• Use security camera footage for purposes beyond physical security
• Share employee data with third-party service providers
• Transfer employee data to entities outside Vietnam

Article 25 of the PDPL further specifies that employers may only collect job-relevant personal data. Data collected from job applicants who are not hired must be deleted unless the applicant agrees otherwise.

Recording Work Conversations

An employee who secretly records a workplace conversation with a colleague or supervisor faces the same legal exposure as anyone else who records a private conversation without consent. The workplace setting does not create an exception to Vietnam's consent requirements.

Employers who record employee conversations (through hidden microphones, phone monitoring, or similar tools) without employee consent likewise face criminal and civil liability, plus administrative penalties under the PDPL.

CCTV and Video Surveillance

Vietnam has been tightening regulations around surveillance cameras. Circular QCVN 135:2024/BTTTT, issued by the Ministry of Information and Communications, established mandatory technical security standards for all IP cameras sold or used in Vietnam. Full compliance was required by January 1, 2026.

The regulation imposes 11 technical requirements covering:

• Secure password mechanisms and access controls
• Login attempt limits to prevent brute-force hacking
• Vulnerability management and secure software update processes
• Data transmission encryption
• Secure storage protocols

Businesses operating CCTV systems in Vietnam must comply with both these technical standards and the PDPL's consent and data processing requirements. Using surveillance footage for purposes beyond the originally stated reason (such as using security footage for employee performance evaluation) requires separate, explicit consent.

Cybersecurity Law Considerations

The 2018 Cybersecurity Law adds another layer of regulation relevant to recording. Article 26 requires certain entities to store data, including user communication content and access logs, within Vietnam's territory. Cyberspace service providers must maintain system logs for at least 12 months to assist law enforcement investigations.

This data localization requirement affects companies that provide communication services or platforms in Vietnam. Recorded communications, whether authorized or not, that are stored on foreign servers may create separate compliance issues under the Cybersecurity Law.

Recordings as Evidence in Vietnamese Courts

Vietnamese law allows audio and video recordings to be submitted as evidence, but their admissibility depends on how they were obtained.

Legal Framework for Evidence

Article 94 of the Civil Procedure Code 2015 classifies audio recordings as a form of electronic evidence. Article 95 requires the submitting party to demonstrate both authenticity and legality.

Admissibility Requirements

For a recording to be admitted as evidence, it must:

• Be clearly audible with identifiable speakers
• Be directly connected to the parties in the case
• Include time-stamping or other contextual indicators
• Be supported by corroborating evidence when possible
• Withstand technical verification if the opposing party challenges its authenticity

The Consent Problem

Here is where Vietnamese law creates tension. The Supreme People's Court initially ruled in 1995 that audio recordings made without the other party's consent could not be used as evidence. The 2002 Provisions on Evidence in Civil Proceedings relaxed this position, holding that evidence is inadmissible only when obtained through methods that "damage another party's lawful rights" or "violate prohibitive legal provisions."

In practice, Vietnamese courts evaluate recordings on a case-by-case basis. A recording made in a business context (such as documenting an oral contract agreement) may be admitted if the court determines the recording did not violate privacy rights. A recording made by bugging someone's home or intercepting their phone calls will almost certainly be excluded and could expose the person who made it to criminal prosecution.

Recordings remain what Vietnamese legal commentators describe as "supporting evidence rather than decisive proof." They work best when combined with documentary evidence and witness testimony.

Recording in Court Proceedings

Journalists and members of the public face restrictions on recording inside Vietnamese courtrooms. Under the Ordinance on Sanctions of Administrative Violations for obstructing procedural activities, recording video or audio of a trial without the consent of the presiding judge can result in fines of up to VND 15 million (approximately USD 575). Recording participants in court proceedings without their consent is also prohibited.

Business Compliance Checklist

Companies operating in Vietnam need to address recording and surveillance practices proactively. Under the 2025 PDPL, organizations must:

• Conduct a Data Processing Impact Assessment (DPIA) within 60 days of beginning any data processing activity that includes recording or surveillance
• Appoint data protection personnel or engage an external data protection service provider (small businesses and startups receive a five-year grace period)
• Obtain specific, informed consent before recording phone calls, monitoring communications, or using surveillance equipment that captures personal data
• Provide opt-out mechanisms for tracking and data collection on digital platforms
• Report data breaches within 72 hours of detection (a change from the prior "immediately upon occurrence" standard under Decree 13/2023)
• Comply with data localization requirements under the Cybersecurity Law for communication data
• Delete job applicant data if the applicant is not hired, unless the applicant consents to retention

Small enterprises and startups that do not process sensitive data or provide data processing services may qualify for five-year exemptions from DPIA requirements and DPO appointments under Article 38 of the PDPL.

Penalties Summary

Vietnam imposes penalties for illegal recording through multiple channels:

Law	Violation	Penalty Range
Penal Code Art. 159	Unauthorized recording/interception of communications	Warning, fine of VND 20-50 million, or up to 3 years imprisonment
Penal Code Art. 159 (aggravated)	Organized, repeated, or abuse-of-position violations	1-3 years imprisonment
Penal Code Art. 288	Illegal provision or use of private information	Fine of VND 30 million to 1 billion, or up to 7 years imprisonment
PDPL (administrative)	General data protection violations	Up to VND 3 billion (approximately USD 115,000)
PDPL (administrative)	Cross-border transfer violations	Up to 5% of annual revenue
PDPL (administrative)	Illegal sale/purchase of personal data	Up to 10x the unlawful proceeds
Civil Code Art. 38	Violation of privacy rights	Civil damages (amount determined by court)