Harassing consumers is fined 70 million, revealing sensitive information is fined up to 80 million

The Government has just issued Decree No. 24/2025 amending and supplementing many regulations on administrative sanctions for violations of consumer rights protection.

Administrative sanctions - Photo: Hanoi Market Management Department

Accordingly, Decree No. 24 increases penalties for administrative violations of consumer rights protection.

Specifically, for violations of information protection of Consumers will be fined from 20 to 30 million VND for the following acts: Collecting and using consumer information without the consumer's consent as prescribed; using consumer information inaccurately or inconsistently with the announced purpose and scope.

Providing information to a third party without consent can result in a fine of up to 40 million VND.

A fine of 30-40 million VND is applied to acts of not having measures to ensure the safety and security of consumer information when collecting, storing, using, or not having measures to prevent violations of consumer information safety and security as prescribed.

If consumer information is transferred to a third party without the consumer's consent as prescribed, a fine of 30-40 million VND will also be imposed. This is a much higher level than Decree 98 on administrative sanctions, where violations of consumer information protection are only fined from 10-20 million VND.

Decree 24 also clearly states that the fine is double the above fine in case the relevant information is personal data Consumer sensitivity. Fines are quadrupled in case the violation is committed by an organization that establishes and operates a large digital platform.

Regarding transactions on cyberspace, Decree 24 also stipulates a fine of 50-70 million VND for business entities establishing, operating, and providing digital platform services if there is a violation.

Including: using measures to prevent display or dishonestly display consumer feedback and reviews of products, goods, services, organizations and individuals doing business on digital platforms, except in cases where such feedback and reviews violate the provisions of law or are contrary to social ethics.

Harassing consumers through direct or indirect contact against the consumer's will to introduce products, goods, services, business organizations or individuals or to propose entering into contracts.

Heavy penalties for violations in cyberspace

Acts that are also subject to heavy penalties include failing to compensate, refund or exchange products, goods or services for consumers due to mistakes by business organizations or individuals; failing to compensate, refund or exchange products, goods or services due to non-compliance with registration, notification, announcement, listing, advertisement, introduction, agreement or commitment.

Swap, cheat products, goods, services when delivering or providing services to consumers; preventing consumers from checking products, goods, services; requiring consumers to purchase additional products, goods, services as a mandatory condition for entering into a contract against the consumer's will shall also be subject to a fine of 50-70 million VND.

This penalty also applies if a business entity establishes, operates, or provides digital platform services without prior notice or without public disclosure to consumers of sponsorship of an influencer in any form to use the image, advice, or recommendations of this person to promote trade or encourage consumers to purchase or use products, goods, or services.

Decree 24/2025 also stipulates a fine of VND 100-200 million for organizations that establish and operate intermediary digital platforms that do not authenticate the identities of organizations and individuals selling products, goods, and providing services on their intermediary digital platforms.

Source