{"id":15238,"date":"2026-07-16T15:09:02","date_gmt":"2026-07-16T08:09:02","guid":{"rendered":"https:\/\/cd.az9s.com\/?p=15238"},"modified":"2026-07-16T15:13:10","modified_gmt":"2026-07-16T08:13:10","slug":"decree-248-2026-nd-cp-what-contents-must-be-disclosed-by-e-commerce-platforms-part-1","status":"publish","type":"post","link":"https:\/\/cd.az9s.com\/en\/decree-248-2026-nd-cp-what-contents-must-be-disclosed-by-e-commerce-platforms-part-1\/","title":{"rendered":"Decree 248\/2026\/ND-CP: What contents must be disclosed by e-commerce platforms? (Part 1)"},"content":{"rendered":"<p>The Law on E-Commerce No. 122\/2025\/QH15 defines four groups of basic content on operating conditions that must be disclosed on the platform including; information about the platform owner, confidentiality policy, rights and obligations of the parties, and the method of receiving and handling requests and complaints. For a platform with an online ordering function, the scope of disclosure is extended to transaction conditions such as price, payment, display priority, livestream, delivery, returns, methods of provision, and termination of service. These contents must be expressed in Vietnamese, easy to understand, not confusing, placed in a conspicuous position, and ensure equality between the parties. The platform must also have a mechanism for users to express their agreement to the operating conditions before opening an account.<\/p>\n<p>The recently issued Decree 248\/2026\/ND-CP has continued to concretize the requirements for disclosure contents and positions that e-commerce platform owners need to establish for compliance purposes. In Part 1, CDLAF will inform you of <strong>the Four groups of information that are required for every e-commerce platform<\/strong>.<\/p>\n<figure id=\"attachment_15239\" aria-describedby=\"caption-attachment-15239\" style=\"width: 711px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-15239\" src=\"http:\/\/cd.az9s.com\/wp-content\/uploads\/2026\/07\/CONTACT-US-1-711x400.jpg\" alt=\"\" width=\"711\" height=\"400\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2026\/07\/CONTACT-US-1-711x400.jpg 711w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2026\/07\/CONTACT-US-1-1400x788.jpg 1400w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2026\/07\/CONTACT-US-1-768x432.jpg 768w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2026\/07\/CONTACT-US-1-1536x864.jpg 1536w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2026\/07\/CONTACT-US-1-2048x1152.jpg 2048w\" sizes=\"auto, (max-width: 711px) 100vw, 711px\" \/><figcaption id=\"caption-attachment-15239\" class=\"wp-caption-text\">Source: Pexel<\/figcaption><\/figure>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of contents:<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #a32411;color:#a32411\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #a32411;color:#a32411\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/cd.az9s.com\/en\/decree-248-2026-nd-cp-what-contents-must-be-disclosed-by-e-commerce-platforms-part-1\/#1_Information_about_the_platform_owner\" >1. Information about the platform owner<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/cd.az9s.com\/en\/decree-248-2026-nd-cp-what-contents-must-be-disclosed-by-e-commerce-platforms-part-1\/#2_Privacy_Policy\" >2. Privacy Policy<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/cd.az9s.com\/en\/decree-248-2026-nd-cp-what-contents-must-be-disclosed-by-e-commerce-platforms-part-1\/#3_Rights_and_obligations_of_the_parties\" >3. Rights and obligations of the parties<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/cd.az9s.com\/en\/decree-248-2026-nd-cp-what-contents-must-be-disclosed-by-e-commerce-platforms-part-1\/#4_Methods_of_receiving_and_settling_complaints_requests_and_complaints\" >4. Methods of receiving and settling complaints, requests, and complaints<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"1_Information_about_the_platform_owner\"><\/span>1. Information about the platform owner<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The platform must allow users to clearly identify which entities are managing, operating, and responsible for the operation of the platform.<\/p>\n<p>For organizations, the minimum amount of information required includes the name, address of the head office, legal representative, number, date of issuance, and place of issuance of the Enterprise Registration Certificate or establishment decision. For individuals or enterprise households, the information must include their name, residential address, and corresponding tax identification number.<\/p>\n<p>This is not just enterprise identification information. In the event of a complaint, refund request, contractual dispute, or data incident, the user must be able to accurately identify the responsible entity. In fact, some platforms only publish trade names, application names, or trademarks without fully showing the legal name of the operator. This type of disclosure carries risks when the trade name does not match the name of the enterprise behind the platform, or multiple companies in the same group are involved in different stages of service provision. Enterprises, therefore, need to clarify which unit is the owner of the platform, which unit is the seller, which unit collects money, and which unit processes personal data. These roles should not be ambiguous in the terms of use.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"2_Privacy_Policy\"><\/span>2. Privacy Policy<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Decree 248\/2026\/ND-CP sets out a relatively comprehensive list for requirements of the privacy policies. The policy must describe the purpose and scope of the information collection, the scope of use, the retention period or method of determining the retention period, the organizations and individuals who can access the information, and the security measures in place. Notably, the policy should go beyond explaining what data enterprises collect. The platform must also disclose the method for the data subject to view, edit, request correction, delete, destroy, or restrict the processing of the provided data. The mechanism for receiving and settling complaints related to information security must also be determined.<\/p>\n<p>This regulation establishes an important requirement: the security policy must align with actual operational practices. Organizations should not state that users have the right to request data deletion unless they provide the necessary mechanisms, such as a request form, contact channel, designated processing point, and internal procedures, to support and process those requests. Similarly, a general record that &#8220;data is stored for the required time&#8221; may not be sufficient if the business fails to explain which criteria are used to determine the required time. The privacy policy also cannot be compiled separately from the technology system. Disclosures should accurately reflect that data is being transferred to billing units, shipping partners, cloud providers, conglomerate companies, or advertising service providers.<\/p>\n<p>It is especially important that all contents related to the privacy policy as mentioned above will be required to comply with the law on data and regulations on personal data protection. It can also be understood that when enterprises carry out procedures related to registering e-commerce websites or procedures or when there is a complaint about the content on the website, the relevant regulatory authority has the right to require the enterprise to prove that the enterprise has <strong>complied with the regulations on data protection and personal data protection<\/strong>, including whether the enterprise has carried out the procedures for assessing the impact of personal data protection or not yet.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"3_Rights_and_obligations_of_the_parties\"><\/span>3. Rights and obligations of the parties<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Platforms must disclose the rights and obligations of at least three groups of entities: <strong>platform owners, sellers, and buyers<\/strong>.<\/p>\n<p><strong>Rights and obligations of e-commerce platform owners:<\/strong> Promulgate, publicize, and organize the implementation of operation and transaction conditions. Develop and publicize service standards and processes for participating in activities on the platform; Collect service fees according to the publicized price policy; Full information or a summary of the type of promotion to be applied is provided to the buyer prior to placing an order; Ensure the safe and stable operation of the platform; Stipulate cases of suspension, termination, or restriction of accounts of sellers and buyers; Apply all necessary measures to ensure the security of information related to business secrets of users and personal information of consumers; Receive and settle requests, reports, and complaints from users; Supervising and preventing violations of the law; coordinate and provide information and data at the request of competent state agencies.<\/p>\n<p><strong>Rights and obligations of sellers:<\/strong> To register, maintain, suspend, and terminate the sale of goods and provision of services; to decide on goods, services, selling prices, and sales promotion policies in accordance with the provisions of law and agreements with the platform managers; to use technical infrastructure, the platform&#8217;s supporting tools; have access to data directly related to enterprise activities; be ensured to make full and timely payments and settle requests, reflections, and complaints according to the principles of publicity and transparency; Provide accurate and complete information; ensure the quality of goods and services; fully fulfill the obligations of delivery, warranty, return, and refund; and not taking advantage of the platform to do business in industries and trades banned from enterprise investment, counterfeit goods, goods infringing upon intellectual property rights, and other violations of law. Fulfill financial obligations to the state; protect buyer data; protect consumer information; coordinate with platform managers and competent state agencies in handling violations of law.<\/p>\n<p><strong>Rights and obligations of buyers:<\/strong> To be guaranteed the interests of consumers; to be provided with complete and accurate information about goods, services, and sellers; to choose goods, services, payment, and delivery methods; to protect personal data; to handle complaints,\u202frequests, and complaints as prescribed; Provide necessary and accurate information; make full and on-time payments. Comply with legal regulations, operating conditions, and trading conditions of the platform; do not take advantage of the platform to commit acts of violating the law.<\/p>\n<p>The point to avoid is to build the clause in such a way that all rights belong to the platform, and all risks are passed on to the seller or buyer. Provisions that allow platforms to lock accounts, hold funds, change fees, or adjust services without specifying grounds, notification processes, and complaint mechanisms can create significant imbalances. The disclosure clause not only needs to protect the platform, but it must also show how the platform&#8217;s power is controlled.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"4_Methods_of_receiving_and_settling_complaints_requests_and_complaints\"><\/span>4. Methods of receiving and settling complaints, requests, and complaints<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The platform must publish at least one online contact method, the intake and processing process, the steps that users must take, the initial response deadline, the expected deadline for resolution, and the tools used to support the processing. A simple customer care email address may not be enough if the platform does not disclose response times, how complaints are classified, requests for evidence, or mechanisms for tracking progress.<\/p>\n<p>For enterprises with a large volume of transactions, the complaint mechanism should be designed as a verifiable process: the time of receipt must be recorded, the record must have a reference code, the user must be able to track the processing status, and the results must be able to be stored. This is also an area where public content needs to match operational capacity. Committing to a processing time which is too short and not having enough personnel or a support system can cause enterprises to continuously violate the policies issued by them.<\/p>\n<p>The Law on E-commerce and Decree 248 has classified e-commerce platforms according to their functions and scope of operation, and based on that classification, set requirements for information disclosure. Therefore, enterprises will also need to accurately determine the function of the e-commerce platform that the business is managing, developing, and operating, whether it directly sells, provides an intermediary environment or has an online ordering function. Determining the exact type of platform is especially important because it determines the obligations and legal responsibilities that enterprises must comply with, from legal procedures to content issues expressed on the platform. This content will continue to be detailed in Part 2 about the content that needs to be disclosed on the e-commerce platform.<\/p>\n<p><strong><em>Time<\/em><\/strong><strong><em> of writing<\/em><\/strong><em>: July 13, 2026<\/em><\/p>\n<p><em>The article contains general information which is of reference value. In case you want to receive legal opinions on issues you need clarification on, please get in touch with our Lawyer \u00a0at\u00a0 <a href=\"https:\/\/mail.google.com\/mail\" target=\"_blank\" rel=\"noopener\"><strong>info@cd.az9s.com<\/strong><\/a><\/em><\/p>\n<div class=\"content-post-nd\">\n<div style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-5519 size-full aligncenter\" src=\"http:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG.png\" alt=\"\" width=\"1080\" height=\"600\" srcset=\"https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG.png 1080w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG-720x400.png 720w, https:\/\/cd.az9s.com\/wp-content\/uploads\/2023\/05\/CHUONG-TRINH-THANG-768x427.png 768w\" sizes=\"auto, (max-width: 1080px) 100vw, 1080px\" \/><\/div>\n<\/div>\n<div class=\"content-post-nd\">\n<p><strong>Why choose CDLAF\u2019s service?<\/strong><\/p>\n<ul class=\"li-content\">\n<li>We provide effective and comprehensive legal solutions that help you save money and maintain compliance in your business;<\/li>\n<li>We continue to monitor your legal matters even after the service is completed and update you when there are any changes in the Vietnamese legal system;<\/li>\n<li>Our system of forms and processes related to labor and personnel is continuously built and updated and will be provided as soon as the customer requests it;<\/li>\n<li>As a Vietnamese law firm, we have a thorough understanding of Vietnam&#8217;s legal regulations, and grasp the psychology of employees, employers, and working methods at competent authorities;<\/li>\n<li>CDLAF&#8217;s team of lawyers has many years of experience in the field of labor and enterprises, as well as human resources and financial advisory.<\/li>\n<li>Strict information security procedures throughout the service performance and even after the service is completed.<\/li>\n<\/ul>\n<\/div>\n<p><strong style=\"color: #a32411;\">You can refer for more information:<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/cd.az9s.com\/en\/transferring-employees-to-perform-other-works-key-considerations-for-enterprises\/\">Transferring Employees to Perform Other Works: Key Considerations for Enterprises<\/a><\/li>\n<li><a href=\"https:\/\/cd.az9s.com\/en\/lawful-labor-discipline-procedures-and-key-notes-for-enterprises\/\">Lawful Labor Discipline: Procedures and Key Notes for Enterprises<\/a><\/li>\n<li><a href=\"https:\/\/cd.az9s.com\/en\/non-compete-agreements-in-employment-relationships-are-they-enforceable-in-vietnam\/\">Non-Compete Agreements In Employment Relationships: Are They Enforceable In Vietnam?<\/a><\/li>\n<li><a href=\"https:\/\/cd.az9s.com\/en\/determining-serious-damage-in-disciplinary-dismissal\/\">Determining \u201cSerious Damage\u201d in Disciplinary Dismissal<\/a><\/li>\n<li><a href=\"https:\/\/cd.az9s.com\/en\/what-must-social-networks-and-online-platforms-do-to-comply-with-the-personal-data-protection-law-2025\/\">What Must Social Networks and Online Platforms Do to Comply with the Personal Data Protection Law 2025?<\/a><\/li>\n<\/ul>\n<div class=\"az-fs-contact-form-7\"><\/div>","protected":false},"excerpt":{"rendered":"<p>The Law on E-Commerce No. 122\/2025\/QH15 defines four groups of basic content on operating conditions that must be disclosed on the platform including; information about the platform owner, confidentiality policy, rights and obligations of the parties, and the method of receiving and handling requests and complaints. For a platform with an online ordering function, the [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":15239,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[64],"tags":[],"class_list":["post-15238","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"acf":[],"_links":{"self":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/posts\/15238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/comments?post=15238"}],"version-history":[{"count":3,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/posts\/15238\/revisions"}],"predecessor-version":[{"id":15242,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/posts\/15238\/revisions\/15242"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/media\/15239"}],"wp:attachment":[{"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/media?parent=15238"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/categories?post=15238"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cd.az9s.com\/en\/wp-json\/wp\/v2\/tags?post=15238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}