Why Corporate Compliance in Vietnam Is Different
Corporate compliance in Vietnam differs from many other jurisdictions mainly due to the diversity of regulatory authorities, the continuous development of the legal framework, and the gap that may exist between written regulations and practical enforcement. Companies operating in Vietnam must not only comply with general corporate laws but also monitor requirements from different authorities depending on their business activities.
For companies operating in Vietnam, compliance involves managing obligations under multiple legal areas. The business registration authority oversees enterprise registration and corporate governance matters under the Law on Enterprises. The tax authorities supervise tax declarations, tax payments, and tax compliance obligations, while accounting and financial reporting are governed by accounting regulations. The Ministry of Home Affairs and relevant authorities regulate employment matters, labor contracts, and workplace obligations. In addition, businesses must comply with regulations on personal data protection, anti-money laundering, investment, and sector-specific licensing requirements where applicable.
Vietnam’s regulatory environment also continues to evolve, requiring businesses to regularly update their internal policies and procedures. Companies need to adapt to changes in areas such as corporate governance, tax administration, data protection, and foreign investment rules to maintain compliance.
In practice, compliance in Vietnam typically involves more than reviewing statutory texts. Application of rules can depend on interpretation and enforcement practices of competent authorities. Effective compliance therefore requires legal knowledge together with ongoing monitoring of administrative practice to reduce legal risk and support sustainable operations.
Regulatory Framework & Risk Assessment
Regulatory risk assessment for a company operating in Vietnam begins with identifying which authorities and regulatory frameworks apply to the company’s specific business activities. A foreign-invested trading company in Vietnam may be subject to requirements from the business registration authority, tax authorities, customs authorities, and (depending on services offered) regulations on e-commerce, consumer protection, and personal data protection. A manufacturing company may also need to comply with environmental regulations, labor and occupational safety requirements.
The risk assessment process converts this regulatory mapping into a practical compliance framework. Each applicable requirement is assessed against (1) the company’s actual business activities, (2) its registered business scope, licenses, and permits, (3) relevant regulatory priorities and enforcement practices, and (4) the potential consequences of non-compliance, including administrative penalties or suspension of business activities.
The result is a prioritized compliance plan that helps businesses identify key risks and take preventive measures, rather than simply relying on a general compliance checklist.
Legal & Regulatory Compliance
Compliance management for foreign-invested enterprises (FIEs) in Vietnam involves the daily process of maintaining compliance with corporate registration, reporting obligations, employment regulations, and tax requirements. Each compliance area operates under different legal frameworks, responsible authorities, timelines, and documentation requirements.
- Corporate registration and licensing compliance — An FIE’s registered business scope must correspond with its actual operations. Changes relating to the company’s legal representative, charter capital, members or shareholders, and registered address must be reported and updated with the relevant authorities in accordance with the Law on Enterprises and Law on Investment.
- Annual filings and compliance reviews — Companies in Vietnam are required to perform periodic reporting obligations, including enterprise reporting, investment reporting for foreign-invested enterprises, tax declarations, and financial reporting depending on their business structure and applicable regulations. Regular internal compliance reviews against corporate documents, licenses, contracts, accounting records, and employment documents help identify potential risks before they become regulatory issues.
- Labor and employment compliance — Employment relationships in Vietnam are mainly governed by the Labor Code and social insurance regulations. Key compliance obligations include written labor contracts, social insurance and health insurance contributions, working-hour management, salary requirements, and compliance with regulations on termination, confidentiality, and employee protection.
- Tax compliance and financial obligations — Tax compliance in Vietnam includes corporate income tax (CIT), value-added tax (VAT), foreign contractor tax (FCT) where applicable, personal income tax (PIT) withholding, and other financial obligations. Businesses must ensure proper accounting records and compliant invoicing practices under the electronic invoice system.
Data & Cybersecurity Compliance
Data protection and cybersecurity compliance in Vietnam is primarily governed by the Cybersecurity Law 2025 (taking effect from 1 July 2026) and the Law on Personal Data Protection 2025. These regulations address different aspects of data management, including cybersecurity requirements, information system security, and personal data processing.
Practical compliance for businesses operating in Vietnam generally includes establishing personal data processing policies, obtaining appropriate consent from data subjects, implementing technical and organizational security measures, maintaining records of data processing activities, and conducting required assessments for certain data-processing activities under applicable regulations. Businesses must also ensure that personal data is collected, used, stored, and shared only for lawful purposes and within the permitted scope.
For cross-border personal data transfers, businesses must comply with personal data protection requirements, including preparing and maintaining relevant records and documentation, while ensuring that transferred data continues to be protected in accordance with Vietnamese regulations. FIEs processing customer, employee, or user data in Vietnam should pay particular attention to internal control systems, agreements with data processors, and mechanisms for transferring data overseas.
In addition, sector-specific requirements may apply depending on the nature of business activities. Companies operating in areas such as finance, telecommunications, healthcare, and digital services may face additional obligations relating to cybersecurity, data storage, or information security. Therefore, data compliance in Vietnam requires continuous monitoring of legal developments and practical implementation to ensure that data protection measures remain aligned with evolving regulatory requirements.
Corporate Governance & Reporting
Corporate governance compliance in Vietnam depends on the company’s legal form, ownership structure, by-laws, management system, and sector. For foreign-owned subsidiaries, governance must also coordinate Vietnamese corporate requirements with parent-company approval processes.
Directors must act within the powers granted by law, by-laws, shareholders’ resolutions, and board decisions. Powers of attorney, delegated authorities, signature rights, and internal approval thresholds should be consistent with both the foreign parent entity’s needs and the group’s control framework. Misalignment between registered powers and actual decision-making can create risk in contracts, banking operations, employment decisions, and regulatory communications.
Reporting obligations include corporate filings, annual financial statements, tax returns, payroll reporting, social security contributions, and, where applicable, beneficial ownership, AML, whistleblowing, sustainability, or sector-specific reporting. These obligations run on different timelines and are often handled by different advisors, which makes coordination essential.
Whistleblowing compliance has become a key governance issue for many companies operating in Vietnam. Internal reporting channels, confidentiality safeguards, anti-retaliation protections, and investigation protocols must be structured in a way that is legally compliant and practically usable by employees and other eligible reporting persons.
Good governance is therefore not limited to formal corporate documents. It requires a working system of approvals, reporting lines, internal controls, compliance ownership, and escalation procedures that can withstand both business growth and regulatory review.
Ongoing Compliance Management
Corporate governance of FIEs in Vietnam is primarily governed by the Law on Enterprises and the Law on Investment, which establish the legal framework for company structure, management authority, and decision-making processes. FIEs must ensure that their corporate documents, governance structure, and internal procedures comply with Vietnamese legal requirements.
- Management structure and authority — The governance structure of an enterprise depends on its legal form, such as a limited liability company (LLC) or joint stock company (JSC). Key corporate decisions, appointment of management positions, and approval of major transactions must follow statutory procedures and the company’s charter. The legal representative plays an important role in managing the company’s operations and representing the enterprise before authorities.
- Reporting and corporate compliance — FIEs must comply with statutory reporting obligations, including investment reporting, enterprise updates, and other filings required by competent authorities. Changes relating to charter capital, ownership structure, legal representative, directors, or registered information must be properly recorded and notified. Effective corporate governance also requires coordination between the local entity and its foreign parent company, particularly regarding shareholder decisions, intercompany transactions, and profit distribution.
Our Role as a Vietnam Corporate Compliance Law Firm
As a regulatory compliance law firm with a Vietnam practice, D’Andrea & Partners Legal Counsel assists foreign companies throughout the full compliance lifecycle in Vietnam: incorporation, corporate governance setup, operational compliance review, policy implementation, internal controls, regulatory updates, and remediation when issues arise.
Our work is designed for international companies that need Vietnam legal advice connected with cross-border execution. A compliance question in Vietnam often affects the parent company, the group’s tax structure, HR policies, data systems, commercial contracts, and internal approval procedures. We coordinate these layers so the Vietnamese entity can operate locally while remaining aligned with the group’s broader compliance framework.
Our corporate compliance services combine legal, corporate, tax, HR, and data protection support. This integrated approach is particularly important for foreign-owned companies, where one operational decision may trigger multiple Vietnamese obligations at the same time.
