Decree 91/2020/ND-CP on fighting spam messages, spam emails and spam calls took effect on 1 October 2020 and replaced the earlier anti-spam decrees. It requires prior consent evidenced through one of four mechanisms the decree defines: the recipient replying to the single opt-in message, completing and confirming a form on paper, a website, an app or a social network, calling or messaging the advertiser’s subscription line, or registering through subscription-support software. A list with no record of one of these mechanisms is not compliant, whatever its opt-in status in the platform.
The decree also requires advertising emails to be labelled at the start of the subject line, and every message must include a working opt-out that is honoured promptly; failing to honour an opt-out is treated as a separate violation from sending without consent. Global templates do not add the label by default, so it is easy to miss on the first localised send. The Personal Data Protection Law, in force since 1 January 2026, then governs how the contact data itself is collected, stored and used.
Language matters as much as compliance. Vietnamese-language emails generally perform better with a Vietnam-market audience than English or machine-translated content, although some audiences, such as regional teams at foreign-invested companies, may still prefer English. The sequence plan confirms who the messages are for before any copy is written.