You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 4, 2017

Tailoring Anti-Corruption Compliance: Vietnam

Expert Talk, Thomson Reuters Risk Management Solutions

Effective anti-corruption compliance programs are tailored for local jurisdictions. While bribery methods share common characteristics, different countries usually have their own business or cultural norms which impact corruption risks. In one country, for example, it may be common for bribes to be disguised as charitable contributions; while in another, political contributions are the favored method to make illicit payments.

Most companies doing business across borders have codes of conduct or other forms of corruption prevention. But when a company is operating in a high-risk environment, just having a code of conduct or a rule prohibiting bribery is not enough. Great-looking compliance programs can founder when set against real-world situations. In short, although many companies promote an organizational culture of ethics and compliance, that culture must be translated to fit the intricacies of local business cultures. This article will review key principles on customizing compliance programs for local jurisdictions, using Vietnam as an example.

The Risks

Vietnam’s rapidly developing economy offers foreign investors significant business opportunities. For investors to truly benefit from this dynamic emerging market, they should also be aware of the compliance risks. While Vietnam has taken measures to combat corruption, the practice persists. Transparency International, an anti-corruption NGO, has given Vietnam a 2015 score of 31 out of 100, with 100 being the least corrupt. Vietnam is ranked 112 out of 168 countries in the survey. For comparison, Cambodia has a 2015 score of 21 out of 100, and a rank of 150 out 168 countries; Laos’s score is 25 out of 100, and is ranked 139 out of 168. Thailand’s score is 38 out of 100, and with a rank of 76 out of 168.

Vietnam’s centralized bureaucratic structure gives its government oversight over nearly all economic activity. Foreign and domestic investors must work with officials of varying seniority, such as licensing authorities, tax officials, and police, on a regular basis. Indeed, the level of investor-to-state interaction is far higher than what most Western companies are used to in their home jurisdictions.

Agents, consultants, and other third-party intermediaries thrive in this environment. Foreign investors often find the bureaucracy opaque and challenging. Many officials also do not speak English. As a result, investors may have no choice but to engage local intermediaries to liaise with state officials. The use of such intermediaries greatly elevates the risk of a corruption-related compliance failure as they may not know or follow the company’s compliance policies.

Furthermore, state-owned enterprises (SOEs) still play a dominant role in Vietnam’s economy. While SOEs’ influence is gradually declining, foreign investors should expect to do business with government-invested companies regularly. Joint venture enterprises, business cooperation contracts, public-private partnerships and general procurement all involve working with the state. Under the U.S. Foreign Corruption Practices Act and other international anti-corruption laws, employees of state-owned companies are generally considered government officials. The government’s strong presence in business presents many opportunities for bribery, increasing the risks.

Ensure the Correct Tone

So what can foreign investors do to protect themselves in this rewarding but high-risk environment? First and foremost, local management must sincerely believe in doing business ethically. While this concept may sound cliché, it holds true. An honest regional managing director is far less likely to tolerate bribery or any bending of ethics rules. This will set the correct tone for the rest of the employees in the local entity. An ethical regional managing director is also less likely to require staff to do “whatever is necessary” to get business. Having a laissez faire attitude to compliance from management will significantly increase the prospects of a compliance failure, given Vietnam’s corruption risks.

Localized Risk Assessment

An initial step to tailor the anti-corruption compliance program is to conduct a localized risk assessment for Vietnam. The assessment should identify the applicable risks to the company. The risks will largely depend on the company’s industry, customer base, and business operations. For example, life sciences companies doing business with state-owned hospitals will face different risks than accountancies. Common risks to assess in Vietnam include the number of required licenses and approvals to obtain; the extent to which the investor will engage with SOEs; and whether and how often the investor will engage third-party agents, consultants, or distributors.

Customized Policies and Procedures

After the risk assessment, the investor should prepare customized policies and procedures to address the relevant risks. As part of this, investors should examine their existing global policies and procedures and address any gaps with respect to the local risks. If such gaps exist, new local policies or procedures designed for Vietnam should be drafted. For example, if gift-giving during the Tet (Lunar New Year) holiday is identified as a major compliance risk, but the global policy does not deal with holiday gifts, a specific local policy should be crafted. Although the main guiding principles in the policies may be universal, the policies should be written in a way that addresses local nuances.

The documentation should be comprehensive enough to cover all the risks the compliance program is looking to mitigate. The policies should also address local legal requirements. The policies should also be available in Vietnamese, easy to read, and accessible by all employees.

Training

Localized training is critical to the success of any anti-corruption compliance program. Local employees, business partners, and other intermediaries should receive training on the investor’s policies, procedures, and compliance program. The training should be in Vietnamese whenever appropriate. It should also involve real-world hypotheticals that employees will face.

In addition to educating the employees on the policies and compliance program, training can help local employees “buy in” to the program. This is important for a number of reasons. First, employees may feel that a (foreign) head office is trying to impose “foreign values” on them. The perception may be that the foreign company does not understand how to do business in Vietnam, and that the compliance program restricts their “freedom” to win business. Similarly, employees may think that the standards they are being asked to comply with do not fit the “real-world” conditions they face. When this this happens, employees will lose respect for the compliance program, leading to compliance failures. Effective training will address this issue.

Effective training should include role-playing involving real-world situations. If the training consists only of a lecture on the company’s anti-corruption policies and the relevant law, it will not be as compelling. Instead, the policies and law should be shown through hypothetical “gray-area” situations that employees actually deal with. This will help employees understand the principles and give the compliance program more credibility. Moreover, the training should be tailored for different employees. For instance, salespeople should be given different training than accountants.

Due Diligence

At times it is necessary for a foreign investor in Vietnam to use an intermediary to liaise with the government or other parties. When working with local third parties, such as consultants, agents, or partners, the investor should conduct an initial screening. During the screening period, the investor should assess the scope of the relationship between the company and the intermediary. For instance, the investor should identify whether the third party will perform services on behalf of the organization or whether it will be authorized to represent the organization.

The investor should also assess how they came into contact with the intermediary they are looking to work with. A bright red flag is raised whenever an official recommends or encourages the investor to use a particular intermediary. Once the details surrounding the relationship have been assessed, the investor should look into the intermediary’s local reputation. Since the indicators for corruption are often not apparent in the business relationship itself, investors should have a strong understanding on the pricing of goods and services and applicable government fees. They should also conduct regular local audits to identify excessive or unusual payments made by the intermediary e.g., payments to foreign bank accounts; payments to corporate entities in bank accounts held by individuals, etc.

Whistleblowers

Essential to the success of any successful compliance program is implementing an effective reporting mechanism. The reporting mechanism will vary by company, but whatever the method used, employees should feel comfortable to report wrongdoing. This means assurances that the employee will not face retaliation. Employees in Vietnam (as elsewhere) may be very reluctant to report on their superiors. The company should instill a culture where reporting wrongdoing is actively encouraged.

Training can help to encourage employees to come forward when they suspect wrongdoing. The critical issue is to ensure that employees do not consider wrongful payments to be “business as usual”. The company can help by actively investigating and dealing with any complaints. Failing to do so will just reinforce employees’ view that wrongful payments are an accepted way to do business.

Conclusion

Any foreign investor seeking to enter Vietnam, or already there, should be cognizant of the anti-corruption compliance risks. Those risks are magnified if the investor does not have a localized compliance program to fit the business and cultural environment in Vietnam. Broad anti-corruption compliance principles certainly apply in Vietnam, as they do elsewhere. But those broad principles may get lost in translation when they cross borders. Therefore, the first step to implementing an effective anti-corruption compliance program in Vietnam is to recognize this challenge and take the appropriate customization measures.

The author would like to thank Keshav Jha for his valuable contribution to producing this article.

RELATED INSIGHTS​ 

June 16, 2025
Thailand has amended its primary anticorruption law to provide robust new protections and direct assistance to whistleblowers. The Organic Act on Anti-Corruption (No. 2) B.E. 2568 (2025) was published in the Government Gazette on June 5, 2025, and came into force the following day. The amendment introduces a clear framework for safeguarding and supporting individuals who report graft. The amendment addresses a critical gap in the previous legislation by establishing formal mechanisms to protect and assist those who come forward with information. The key changes aim to shield whistleblowers from retaliatory legal and disciplinary actions, thereby encouraging more citizens to participate in exposing corruption without fear of reprisal. Key updates to the law are discussed below. Whistleblower Immunity The amendment clarifies and strengthens legal immunity by revising section 132 of Thailand’s original anticorruption law from 2018. Under the revised section, individuals who provide good-faith statements, information, evidence, or opinions to the National Anti-Corruption Commission (NACC) regarding offenses under its jurisdiction will be protected from civil, criminal, and disciplinary liability. This protection is explicitly extended to individuals who provide information to other state agencies tasked by the NACC to investigate corruption, such as the Public Sector Anti-Corruption Commission or the whistleblower’s own supervisors. Protection and Assistance A new section added to the law establishes a clear and swift process for activating protections. When the NACC learns that a whistleblower is facing legal complaints, criminal charges, or disciplinary action due to their report, the commission must review the matter and decide on providing protection within 15 days. If the NACC determines that the whistleblower acted in good faith, its office is required to provide immediate assistance. Legal and Financial Support Another newly introduced section outlines a wide range of assistance measures the NACC office can provide in civil and criminal cases
June 6, 2025
As from July 1, 2025, as part of its ongoing efforts to digitalize and streamline the delivery of public services, the Vietnamese government will officially conduct administrative procedures, both online and offline, only via electronic identity (“e-ID”) accounts on the VNeID platform. In particular: Online administrative procedures carried out via the National Public Service Portal or via information systems for administrative procedures at the ministerial or provincial level are required to be implemented by using e-ID accounts only. When receiving dossiers, authorities will be required to check and verify the e-IDs of companies or individuals responsible for conducting administrative procedures. Further, it is worth noting that to complete the registration of an e-ID account for a company, the legal representative of the company must hold a level-2 e-ID account. Compliance Considerations Vietnam’s first regulation of e-ID accounts for individuals and organizations was issued in Decree No. 59/2022/ND-CP dated September 5, 2022, on electronic authentication and identification. This decree was subsequently replaced by Decree No. 69/2024/ND-CP dated June 25, 2024, which governs the same matters. Registration and operation of e-ID accounts are centralized through VNeID, a digital ID app developed by the National Population Data Center under the Ministry of Public Security of Vietnam. Although the registration of e-ID accounts for companies is not explicitly mandated by law, the absence of an e-ID account may hinder companies from completing administrative procedures, including licensing and reporting obligations. Such non-compliance could consequently result in administrative penalties. To mitigate unexpected non-compliance and administrative fines due to the lack of an e-ID account, companies should be well prepared for and implement the registration of a company e-ID account as soon as possible.
May 28, 2025
Tilleke & Gibbins attorneys in Vietnam have contributed the 2025 edition of Doing Business in Vietnam, a comprehensive Q&A-style resource from Thomson Reuters Practical Law that provides essential insights for companies navigating business operations in Vietnam. The guide presents a detailed overview of the country’s legal framework and regulatory environment, reflecting recent updates in Vietnamese legislation and practice. This annually updated guide offers key information on the following areas: Legal system: Structure of the Vietnamese judiciary and the role of codified law. Foreign investment: Conditions for market access, licensing requirements, foreign ownership restrictions, and investment incentives. Business vehicles: Formation and operation of legal entities, including limited liability companies, joint-stock companies, and representative offices. Employment: Employment contracts, social insurance, labor rights, and procedures for hiring foreign nationals. Tax: Overview of corporate income tax, personal income tax, value-added tax, and other tax obligations. Intellectual property: Procedures for protecting and enforcing patents, trademarks, copyrights, and other IP rights. Data protection: Compliance requirements under Vietnam’s data privacy laws, including the Personal Data Protection Decree. Competition law: Antitrust rules and regulatory oversight under the Law on Competition. Anti-bribery and corruption: Legal framework and enforcement practices aimed at curbing corrupt activities. E-commerce and digital business: Regulations governing online platforms, digital content, and cross-border services. Marketing and advertising: Laws and guidelines on advertising standards and consumer protection. Product regulation and liability: Safety requirements, product liability issues, and roles of relevant authorities. Doing Business in Vietnam is part of Practical Law’s global series of legal guides designed to support international practitioners and businesses. To access the most recent edition of the Vietnam guide, visit the Practical Law website and sign up for a free trial.
May 2, 2025
Attorneys from Tilleke & Gibbins have updated the latest edition of Doing Business in Thailand, a Q&A-style guide from Thomson Reuters Practical Law that offers an overview of key legal considerations for companies operating in jurisdictions worldwide. The contribution outlines the country’s legal and regulatory framework for foreign investment and business operations and reflects the latest legislative developments. The chapter addresses the following core topics: Legal system: Structure of the courts and the codified nature of Thai law. Foreign investment: Business restrictions under the Foreign Business Act, sector-specific regulations, exchange control rules, and investment incentives. Business vehicles: Overview of partnerships, private and public limited companies, and other legal entities. Employment: Labor protections, employment contracts, foreign worker requirements, and termination procedures. Tax: Corporate and personal income tax, indirect taxes, and tax obligations for residents and non-residents. Intellectual property: Registration and enforcement of patents, trademarks, designs, and copyrights. Data protection: Key provisions of the Personal Data Protection Act and related compliance obligations. Competition law: Regulatory framework under the Trade Competition Act. Anti-bribery and corruption: Relevant legislation and enforcement mechanisms. E-commerce and digital business: Legal regime for online transactions and digital platforms. Marketing and advertising: Consumer protection laws and regulations affecting advertising and marketing practices. Product regulation and liability: Safety standards, liability regimes, and roles of enforcement authorities. Practical Law, a legal reference resource from Thomson Reuters, publishes a range of guides for hundreds of jurisdictions and practice areas. The insurance and reinsurance guide is a valuable resource for legal practitioners, covering numerous jurisdictions worldwide. To view the latest version of the guide, please visit the Practical Law website and enroll in the free Practical Law trial to gain full access.