Digital infrastructure has quietly joined power and water on the short list of make-or-break inputs for FDI projects in Vietnam. A smart factory streams machine data to the cloud around the clock; a regional data center customer needs carrier-grade connectivity with contractual uptime; and Vietnam’s new personal data protection regime — the Law on Personal Data Protection 91/2025/QH15, effective 1 January 2026 — adds a compliance layer to every architecture decision involving personal data. This guide covers internet connectivity and digital infrastructure for data centers and smart factories: what to demand from connectivity, what a data center site physically requires, and where the data law touches your design. All legal references are cited at the appropriate level; no technical specifications are invented.
Connectivity: bandwidth, routes and redundancy
Start with the non-negotiable: diverse, redundant connectivity. For a data center or a smart factory, a single fiber path is a single point of failure, regardless of the bandwidth figure on the contract. Demand at least two physically diverse fiber entries into the building from different carriers or different routes, so a roadworks cut on one street does not silence the facility. Evaluate international capacity separately from domestic: submarine cable systems landing in Vietnam carry the region’s traffic, and their maintenance windows and fault history are legitimate due-diligence questions for any operator promising regional latency figures. For smart factories, add the campus layer — industrial Wi-Fi or private 5G for machine connectivity — designed for the radio-unfriendly reality of steel structures and electromagnetic noise. Contract for committed service levels with measurement methodology and credits, not marketing-grade “up to” numbers.
Power and cooling: the physical demands of a data center
A data center is, thermodynamically, a building that converts electricity into heat and must expel that heat continuously. Site selection therefore starts with power: dual utility feeds where available, on-site generation sized for the critical IT load, UPS bridging, and a clear-eyed assessment of the local grid’s reliability record — the same northern-grid considerations that apply to electronics factories apply doubly here. Cooling is the second pillar: the tropical climate makes cooling the dominant operating cost, so evaluate chiller plant efficiency, water availability for cooling systems, and free-cooling potential realistically rather than from temperate-climate brochures. Add the structural basics — floor loading for dense racks, ceiling height for hot-aisle containment, fire suppression appropriate to electrical fires, and physical security zoning. None of these are exotic; together they are what separates a credible facility from a warehouse with servers.
Smart factories: the digital layer on the production floor
For manufacturers, digital infrastructure means the network that carries the factory’s nervous system: MES and SCADA traffic, machine vision streams, predictive maintenance data and the links to corporate cloud and customer portals. Design principles that matter: segment operational technology networks from office IT — converged flat networks are how ransomware reaches the production line; build edge computing capacity for latency-sensitive control loops that cannot wait for a round trip to a distant cloud region; and plan data retention and backhaul realistically, because a vision-inspection system can generate more data per day than the factory’s entire ERP history. Cybersecurity belongs in the infrastructure budget from day one, not as a later overlay: the factory that treats network design and security design as one project spends less than the factory that retrofits either.
The data law at reference level: what 91/2025 touches
Vietnam’s Law on Personal Data Protection 91/2025/QH15, effective 1 January 2026, establishes the country’s first comprehensive personal-data regime — and it touches data center and smart-factory architectures wherever personal data flows. The reference points an investor should carry into design: consent as the default basis for collecting and processing personal data, with limited exceptions; purpose limitation, meaning data collected for one purpose cannot be freely repurposed; cross-border transfer rules that add procedural steps before personal data leaves Vietnam — directly relevant to any architecture that replicates or processes Vietnamese personal data abroad; and breach notification duties with tight timelines. This guide treats the law at reference level only: the detailed obligations, including the implementing Decree 356/2025/ND-CP, deserve a dedicated compliance review with Vietnamese counsel before systems go live. The design takeaway is architectural — build data classification, residency awareness and consent management into the platform now, because retrofitting them later is an order of magnitude harder.
Checklist for choosing a data center location
Evaluate candidate sites against a single scorecard before committing: fiber diversity (two-plus physically separate entries, multiple carriers); international cable access and latency to your key markets, verified by measurement not brochure; power reliability record and the cost of achieving your uptime target at that site; cooling economics in the local climate; flood, storm and seismic risk with mitigation in place; distance to skilled operations staff and to your customers; the industrial park’s or zone’s track record with high-availability tenants; and the regulatory posture — data-related, tax and licensing — confirmed with counsel. Score each site, weight by what your business model actually values, and visit the top two in person with your network architect and your lawyer. Digital infrastructure decisions are ten-year commitments wearing the disguise of technical checklists; choose the site your future self will thank you for.
Frequently asked questions
1. What connectivity should a data center or smart factory demand?
At least two physically diverse fiber entries from different carriers or routes, so one street cut cannot silence the facility. Evaluate international submarine-cable capacity separately, add campus wireless designed for steel structures, and contract committed service levels with measurement and credits — not ‘up to’ marketing numbers.
2. What physical infrastructure does a data center site require?
Power first: dual feeds where available, on-site generation for critical IT load, UPS bridging, and an honest read of local grid reliability. Then cooling — the dominant operating cost in a tropical climate — plus floor loading, fire suppression for electrical fires, and physical security zoning.
3. How does Vietnam’s data protection law affect data center design?
At reference level: consent as the default basis for processing personal data, purpose limitation, cross-border transfer procedures before Vietnamese personal data leaves the country, and breach notification duties. Build data classification, residency awareness and consent management into the architecture now — retrofitting later is far harder.
4. What does the Personal Data Protection Law 91/2025 require for transferring personal data to group systems abroad?
Law 91/2025 sets principles on data-subject consent, purpose limitation and conditions for transferring personal data abroad, plus a duty to notify when a data breach occurs. Data centers and smart factories running shared group ERP and HR systems must review each cross-border data flow instead of assuming operational data contains no personal element — employee account data and timekeeping records are commonly overlooked. Impact-assessment files and internal transfer documentation should be prepared before the system goes formally live.
5. What legal points apply when a smart factory uses biometric timekeeping?
Biometric data tied to personal identity sits in the category needing high-level protection under the Law 91/2025 framework, so the employer needs a clear processing basis, transparent notice to employees and security measures proportionate to where fingerprint and face templates are stored. A frequent error is deploying timekeeping devices through a vendor without a data-processing agreement, leaving liability for a leak unclear. Retention periods for biometric data after an employee leaves should also be set in internal rules in advance.