Law on Cybersecurity, unauthorized access prohibition
Law No. 24/2018/QH14 (Law on Cybersecurity), art. 8(3), art. 9
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 1 January 2019.
A computer misuse rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not illegally access a telecom network, the Internet, a computer network, an information system, or a database belonging to another person.
- Do not distribute software, or use a tool, that obstructs, disrupts, or harms the operation of a telecom network, computer network, information system, or database.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Article 9 provides that a person who breaches the Law shall, depending on the nature and seriousness of the breach, be disciplined, be subject to a penalty for an administrative offence, or be criminally prosecuted, and must pay compensation for any loss or damage caused; the Law itself states no fine amount or imprisonment term, leaving these to administrative decrees and a Penal Code provision not described here.
Who enforces it
Enforcement body
The Ministry of Public Security's Cybersecurity Task Force, with the Ministry of National Defence responsible for military information systems (arts. 30, 37).
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 8(3) strictly prohibits producing or using tools to obstruct or disrupt the operation of a telecom network, the Internet, a computer network, an information system, or an e-facility, distributing software that harms such a system, or illegally accessing a telecom network, the Internet, a computer network, an information system, or a database of another person.
The prohibition's own wording turns on access being illegal rather than on defeating a specific security measure, so whether it reaches a scraper reading a public, unauthenticated page is unsettled rather than confirmed either way, and no reported case addresses the point.
Article 9 provides that a breach of the Law is, depending on its nature and seriousness, disciplined, subject to an administrative penalty, or criminally prosecuted, with compensation owed for any loss caused, but the Law itself states no fine amount or imprisonment term for this prohibition, leaving those to administrative decrees and the Penal Code.
When LexLint raises it
crawls_webtrains_models