Foreign Investment

IoT in Agriculture: Sensor Data Law

The problem: thousands of field sensors collect soil, weather, and crop data every minute — who owns it, how may it be used? Quick answer: agricultural IoT sensor data is valuable digital property — collection, use, and sharing rights must be contractually established; and where data attaches to individuals (farm locations, farmer identities), personal-data law applies (Law 91/2025, Decree 356/2025).

Who owns sensor data?

  • Farmers/farm owners: data arising from their land and cultivation — in principle theirs, unless contracts say otherwise.
  • IoT solution providers: often want usage rights (anonymized, aggregated) to improve algorithms and products — requiring farmer consent in service contracts.
  • Third parties: sharing with partners (banks, insurers, distributors) — needs contractual basis and consent; no selling data without permission.

When is sensor data personal data?

Farm-location data, farmer-identifying information, household-attached data — personal data under Law 91/2025/QH15 and Decree 356/2025/ND-CP (effective 1 January 2026). IoT providers as data processors must: state collection purposes; obtain consent; secure data; avoid misuse. Violations risk fines up to 5% of revenue.

What IoT service contracts need

Data-collection scope; use purposes; each party’s data rights; retention periods; security duties; end-of-contract handling (deletion or return); breach liability. Farmers signing IoT contracts without reading data clauses usually lose disputes.

Frequently Asked Questions

1. Who owns field sensor data?

In principle farmers/farm owners — unless contracts say otherwise. Provider use needs contractual consent.

2. Is IoT data personal data?

When attached to specific individuals — yes, under Law 91/2025 and Decree 356/2025.

3. Can IoT firms sell farmer data?

No without consent. Sharing and selling need contractual basis and data-owner consent.

4. Penalties for IoT data leaks?

Fines up to 5% of revenue under the personal-data framework (Decree 356/2025), plus damage liability.

5. What data clauses do IoT contracts need?

Collection scope, use purposes, party rights, retention, security, end-of-contract handling, breach liability.


This article has been quality-reviewed by the FLAW AI Legal Council.