What healthcare leaders in Vietnam are asking in 2026, and how Edgecraft Digital can help
By Robyn Kirk, 21 October 2026
As 2026 draws to a close, clinic owners, practice managers and hospital administrators across Vietnam are dealing with new rules on electronic medical records, cybersecurity and personal data protection, all at once. Here are the four questions we hear most often, and how we help clinics answer them.
1. “How do we meet the Circular 13 EMR standards without disrupting daily work?”
What we hear
Circular 13/2025/TT-BYT sets clear requirements for electronic medical records (EMR), and clinics are due to make the move by 31 December 2026. Many practices still rely on older software installed on their own computers, or on paper forms. Directors worry that upgrading will mean downtime, high software costs and retraining staff.
How we help
- Built on international standards. Our platform uses Medplum and the HL7 FHIR (R4) standard, so your records are structured to work with other health systems.
- A step-by-step rollout. You don’t need to replace everything at once. Start with one app, such as digital patient consent, and move to the full EdgeCare platform when it launches in 2027.
- Designed for clinic workflows. Tablet-friendly screens for intake at reception and for doctors’ clinical notes.
2. “Is our patient consent process ready for Law 91 and Decree 330?”
What we hear
The Law on Personal Data Protection (Law No. 91/2025/QH15) took effect on 1 January 2026, and Decree 330/2026/NĐ-CP has set fines for breaches since 19 August 2026. Health data is sensitive personal data, so a paper tick-box or a verbal agreement is hard to rely on in an inspection. Clinics need a time-stamped record of what each patient agreed to, the wording they saw, and when they gave or withdrew consent.
How we help: EdgeConsent
- Free for hosting clients. EdgeConsent is included for our cloud hosting clients from late 2026. It is a web app that runs on reception iPads, Android tablets and clinic computers.
- A record you can show. Patients give consent for each purpose, in Vietnamese or English. Each action is stored as a time-stamped FHIR Consent and AuditEvent record that cannot be edited.
- Reports for inspections. Export consent records and audit trails when inspectors or your data protection lead ask for them.
3. “Is it a problem to store patient data on overseas cloud servers?”
What we hear
Clinics want reliable cloud hosting, but sending patient records overseas brings extra obligations, such as a transfer impact assessment under the Law on Personal Data Protection. The Law on Cybersecurity (Law No. 116/2025/QH15) adds its own requirements. Many owners would rather keep patient data in Vietnam and avoid the question.
How we help: patient data stays in Vietnam
- Applications run on AWS Hanoi. We run your applications in the AWS Hanoi Local Zone.
- Backups in a Tier III data centre in Vietnam. Backups, encrypted files and audit logs are copied to a Tier III certified data centre in Vietnam.
- Evidence for your board and regulators. We report on where your data is stored and how it is protected, so you can show your board, investors and health authorities.
4. “How can a small clinic afford secure IT?”
What we hear
Building healthcare software, securing servers, employing cloud specialists and monitoring security around the clock are beyond the budget of most private and specialist clinics.
How we help: one managed service
- One provider. Instead of managing several vendors, security keys and software updates, you work with Edgecraft Digital for hosting, software, security monitoring and compliance support, priced to your needs.
- We handle the technical work. Our team looks after infrastructure, database encryption, backups and software maintenance, so your staff can focus on patients.
Talk to us
Adapting to Vietnam’s new healthcare rules doesn’t have to be overwhelming. Whether you need a consent solution now or secure hosting for your clinic’s systems, we can help. Email hello@edgecraft.digital or book a time with us for a compliance chat or a demo of EdgeConsent.
Book a compliance chatFor the law and fines in detail, read Vietnam’s new data protection rules: what clinics need to know in 2026.
This article is general information, not legal advice. For advice on your situation, speak with a lawyer in Vietnam.