The Government has just issued Decree No. 24/2025/ND-CP amending and supplementing many regulations on administrative sanctions for violations of consumer protection rights.
For violations of consumer information protection, Decree No. 24/2025/ND-CP stipulates a fine of 20-30 million VND for the following acts: Collecting and using consumer information without consumer consent according to regulations; using consumer information incorrectly, not in accordance with the announced purpose and scope.
A fine of 30-40 million VND is applied to the following acts: Failure to ensure the safety and security of consumer information when collecting, storing, using or failing to take measures to prevent violations of consumer information security and safety as prescribed.
If the consumer's information is transferred to a third party without the consumer's consent according to regulations, a fine of 30-40 million VND will also be imposed.
Decree 24/2025/ND-CP also clearly states: Fines are twice the above fine in case the relevant information is sensitive personal data of consumers. Fines are 4 times higher in cases of violations committed by organizations establishing and operating large digital platforms.
Previously, according to Decree 98/2020/ND-CP, violations of consumer information protection were only fined from 10-20 million VND.
Decree 24/2025/ND-CP supplements regulations on penalties for violations in transactions in cyberspace.
Accordingly, a fine of 50-70 million VND will be imposed on a business entities that establish, operate, or provide digital platform services for one of the following violations: Using measures to prevent displaying or displaying dishonest feedback and reviews from consumers on products, goods, services, organizations, and individuals doing business on digital platforms, except in cases where such feedback and reviews violate legal regulations, are against social ethics; harassing consumers through direct or indirect contact contrary to the consumer's wishes to introduce products, goods, services, business organizations, and individuals or propose to sign contracts.
Uncompetitive acts of not compensating, refunding or exchanging products, goods and services to consumers due to mistakes of business organizations and individuals; not compensating, refunding or exchanging products, goods and services to consumers because the products, goods and services are not in accordance with the registration, notification, announcement, listing, advertising, introduction, cooperation, and commitment of business organizations and individuals; defrauding, defrauding products, goods and services when delivering goods and providing services to consumers; preventing consumers from checking products, goods and services; requiring consumers to buy more products, goods and services as mandatory conditions to sign contracts contrary to the user's wishes will also be fined from 50-70 million VND.
Decree 24/2025/ND-CP stipulates a fine of VND100-200 million for organizations establishing and operating intermediate digital platforms that do not authenticate the identities of organizations and individuals selling products, goods, and providing services on their intermediate digital platforms.
