Vietnam Fines Zalo and TikTok Over Data Privacy Violations

Consumer data rules tighten as Vietnam signals tougher oversight of Big Tech platforms

Vietnam has imposed financial penalties on two of its most influential digital platforms, sending a clear signal to global tech companies operating in Southeast Asia: consumer data protection is no longer negotiable. Authorities have fined VNG Group, the parent company of Zalo, and TikTok for breaches of consumer protection regulations related to personal data collection and usage.

The National Competition Commission, under Vietnam’s Ministry of Industry and Trade, fined VNG 810 million VND (approximately USD 32,000) and TikTok 880 million VND (around USD 35,000). While the monetary amounts are modest by global standards, the regulatory implications are significant for international investors, platform operators, and digital advertisers watching Vietnam’s fast-growing tech market.

According to the regulator, Zalo committed multiple violations of the Law on Consumer Protection, including failing to provide users with meaningful choices over what personal data they consent to share. The platform did not allow users to opt in or out of specific categories of data collection, nor did it provide clear options to refuse the use of personal information for advertising or other commercial purposes. Authorities also found prohibited clauses embedded in Zalo’s standard terms of service, with no clear disclosure of their effective date.

The enforcement action follows public backlash in late December 2025, when Zalo updated its terms of service and required users to “agree to continue using the service.” The move triggered widespread concerns over privacy and data security, prompting regulators to demand clarification and corrective action. VNG has since stated that it cooperated proactively with authorities and has already revised several policies, with further changes underway.

TikTok faced similar findings. Regulators concluded that the platform lacked adequate mechanisms for users to consent to or reject the use of their personal data for advertising and product promotion. The commission also cited incomplete and potentially misleading disclosures to users, as well as contractual terms that violated Vietnam’s consumer protection framework. TikTok has been instructed to halt the violations and comprehensively review its policies and user-facing disclosures.

For global readers, the case underscores a broader shift in Vietnam’s digital governance. As one of Southeast Asia’s fastest-growing internet economies—with a young, mobile-first population and rising digital ad spending—Vietnam is tightening regulatory alignment with international data protection norms. For Big Tech firms, digital advertisers, and foreign investors, the message is clear: market access increasingly comes with higher compliance expectations.

The key question now is whether these fines mark isolated enforcement actions—or the beginning of a more assertive regulatory era that could reshape how global platforms collect, monetize, and govern user data across Vietnam and the wider ASEAN digital economy.