Anti-Money Laundering Law 14/2022/QH15
Customer identification, record-keeping and reporting obligations for activities within the law’s scope.
Download PDF →Transparency & Data rights
Legal basis
for open banking.
Explore regulations on bank connectivity, personal data protection and electronic transactions in Vietnam.
| Document / Reference | Issued & Effective | Summary & Provisions | Status | Read document |
|---|---|---|---|---|
LawPersonal Data Protection Law91/2025/QH15 Authority: National Assembly Personal data protection | Issued: 26/06/2025 Effective: 01/01/2026 | Sets out data subjects’ rights and the responsibilities of parties processing personal data; provides the basis for collecting, using and protecting personal data in digital services. | In force | |
DecreeImplementation of the Personal Data Protection Law356/2025/NĐ-CP Authority: Government Personal data protection | Issued: 31/12/2025 Effective: 01/01/2026 | Details certain provisions and measures for implementing the Personal Data Protection Law. Clause 2, Article 42 repeals Decree 13/2023/NĐ-CP from 01/01/2026; Clause 3 amends Clause 2, Article 16 of Decree 165/2025/NĐ-CP on core and important data. | In force | |
LawLaw on Credit Institutions32/2024/QH15 Authority: National Assembly Banking & Open API | Issued: 18/01/2024 Effective: 01/07/2024 | Article 13 addresses information confidentiality; Article 14 addresses safety and business continuity for credit institutions and foreign bank branches. Amendments can be consulted in Consolidated Document 100/VBHN-VPQH dated 22/04/2026. | Amended | |
DecreeConfidentiality and disclosure of credit institutions’ customer information117/2018/NĐ-CP Authority: Government Banking & Open API | Issued: 11/09/2018 Effective: 01/11/2018 | Regulates the confidentiality and disclosure of customer information by credit institutions and foreign bank branches, including banks sharing customer information subject to legal conditions. | In force | |
CircularOpen application programming interfaces in the banking sector64/2024/TT-NHNN Authority: State Bank of Vietnam Banking & Open API | Issued: 31/12/2024 Effective: 01/03/2025 | Regulates the deployment of open application programming interfaces in banking, including connectivity principles, data processing and the responsibilities of banks and third parties. | In force | |
CircularSafety and security of online services in the banking sector50/2024/TT-NHNN Authority: State Bank of Vietnam Banking & Open API | Issued: 31/10/2024 Effective: 01/01/2025 | Sets safety and security requirements for online services according to the type of institution and service; processing banking data does not automatically bring every organization directly within its scope. Amended by Circular 77/2025/TT-NHNN (issued on 31/12/2025, effective from 01/03/2026, with specific application dates in Article 12). | Amended | |
DecreeRegulatory sandbox in the banking sector94/2025/NĐ-CP Authority: Government Regulatory sandbox | Issued: 29/04/2025 Effective: 01/07/2025 | Regulates the banking regulatory sandbox, including data-sharing solutions using Open APIs. Participation depends on the conditions, procedures and scope approved by the competent authority. | Amended | |
DecreeAmendments to Decree 94/2025/NĐ-CP382/2026/NĐ-CP Authority: Government Regulatory sandbox | Issued: 06/10/2026 Effective: 06/10/2026 | Amends and supplements certain provisions of Decree 94/2025/NĐ-CP. Read this amendment together with the original decree when reviewing sandbox participation conditions and procedures. | Newly issued | |
LawLaw on Electronic Transactions20/2023/QH15 Authority: National Assembly Cybersecurity & e-transactions | Issued: 22/06/2023 Effective: 01/07/2024 | Regulates electronic transactions and the legal validity of data messages and electronic signatures. Consent to personal data processing must also comply with personal data protection legislation. | In force | |
LawCybersecurity Law116/2025/QH15 Authority: National Assembly Cybersecurity & e-transactions | Issued: 10/12/2025 Effective: 01/07/2026 | Provides the current legal basis for cybersecurity. Under Clause 2, Article 44, the 2015 Law on Cyberinformation Security and the 2018 Cybersecurity Law ceased to have effect on 01/07/2026. | In force |
Legal references by entity and integration scope
Law on Protection of Consumers’ Rights 19/2023/QH15
Applies to service activities within the scope of consumer protection.
Download PDF →