You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 22, 2025

Vietnam’s Draft Resolution on Financial Centers: Implications for Fintech and Banking

Tasked with implementing the Politburo’s policy outlined in Notice No. 47-TB/TW dated November 15, 2024, the prime minister of Vietnam issued Decision No. 1718/QD-TTg on December 31, 2024, appointing himself as the head of a steering committee dedicated to the establishment of an international financial center in Ho Chi Minh City and a regional financial center in Da Nang by 2025. The Ministry of Planning and Investment has subsequently drafted an outline for the National Assembly’s Resolution on the Establishment of Regional and International Financial Centers in Vietnam (“Draft Resolution”).

This Draft Resolution introduces two key policy groups: (i) policies governing the quantity, location, structure, organization, functions, and responsibilities of the financial centers; and (ii) policies applicable to various areas and matters within the financial centers.

Notably, under the Draft Resolution, fintech has been identified as a key sector, with a specific focus on the implementation of a “controlled sandbox” policy for business models involving virtual assets and cryptocurrencies. Under this framework, transactions related to virtual assets and cryptocurrencies will be permitted from July 1, 2026, subject to licensing, management, impact assessment, and risk oversight by the financial centers’ Management and Operations Committee.

Scope of Application and Key Principles

The Draft Resolution applies to a wide range of stakeholders, including investors, regulatory agencies, organizations, and individuals involved in the establishment, organization, and operation of regional and international financial centers in Vietnam. These financial centers will have clearly defined geographical boundaries and specific locations, which will be further specified and detailed by the People’s Committees of Ho Chi Minh City and Da Nang.

Companies successfully registered as members of these financial centers will benefit from special investor-friendly policy principles, which may differ from the general legal and regulatory framework applicable in other parts of Vietnam.

Most notably, the state will implement mechanisms and policies to encourage capital inflows, facilitate the adoption of advanced technology and modern management practices, and promote infrastructure development within the financial centers. The management agencies of the financial centers will apply specialized administrative procedures to meet investors’ needs in accordance with international standards and best practices. Additionally, where provisions of the Draft Resolution differ from existing laws, resolutions, or ordinances, the provisions of the Draft Resolution will prevail.

Policy Framework for Establishment and Governance of Financial Centers

The Draft Resolution outlines the framework for the establishment and governance of financial centers in Vietnam, which will include a comprehensive international financial center in Ho Chi Minh City and a regional-scale financial center in Da Nang. To ensure effective management and operations, the financial centers will be overseen by dedicated agencies, including a (i) management and operations committee, (ii) financial supervision committee, and (iii) international arbitration center.

The management and operations committee will be responsible for the overall administration and strategic oversight of the financial center. Its organizational structure will consist of a board of directors and several key departments, including strategic management, financial management, operations supervision, and management coordination.

The financial supervision committee will focus on ensuring compliance with international financial standards and regulations, fostering a transparent and integrity-driven environment. This committee will also comprise a board of directors supported by specialized departments, such as audit, legal, welfare, risk management, and governance and human resources.

Additionally, each financial center will host an international arbitration center, which will facilitate the resolution of disputes arising from investment and business activities within the financial ecosystem.

Specific Policies for Financial Centers

The Draft Resolution also sets forth specific policies that will govern key areas within the financial centers. These policies cover the membership registration system; currency, banking, and foreign exchange management; fintech; capital markets; personal and corporate income tax; immigration and residency; human resource training and development; labor, employment, and social security; strategic investments; land use and infrastructure development; and trade and business regulations. Furthermore, policies related to dispute resolution mechanisms for investment and business activities are also included.

A significant feature of the Draft Resolution is the introduction of a controlled sandbox policy for fintech enterprises, particularly those engaged in virtual assets and cryptocurrency-related business models. Under this framework, transactions involving virtual assets and cryptocurrencies will be clearly permitted within the financial centers starting from July 1, 2026. These transactions will be subject to licensing, regulatory oversight, impact assessment, and risk management measures administered by the Management and Operations Committee. Additionally, issues concerning anti-money laundering measures related to crypto assets and cryptocurrencies; the issuance, ownership, and trading of non-fungible tokens (NFTs) and utility tokens; and regulatory measures for crypto-asset mining activities (to limit risks to energy security and the environment) will be further regulated by the government.

In the domain of currency, banking, and foreign exchange management, the Draft Resolution proposes policies that reflect international best practices and address the practical needs of the financial centers. These policies include (i) anti-money laundering regulations, including those related to crypto assets; (ii) allowing financial transactions within the centers in both VND and freely convertible foreign currencies; and (iii) procedures and processes for priority areas in the financial centers for some traditional products in commercial banking activities.

The Draft Resolution also provides a streamlined regulatory framework for establishing and managing the operations of foreign credit institutions within the financial centers. Notably, banks and credit institutions headquartered in the centers will not be subject to foreign ownership restrictions or investment conditions when providing financial services within the centers or across borders. In addition, to align with international financial standards, the implementation of Basel III regulations is scheduled to commence on January 1, 2026. Furthermore, a digital banking model will be introduced, enabling commercial banks to offer advanced digital services within the financial centers from the same date.

Outlook

By establishing a structured regulatory framework, the forthcoming resolution aims to attract investment, drive financial innovation, and position Vietnam as a competitive player in the global financial landscape. A key highlight of the resolution is its focus on the fintech sector, particularly through initiatives such as the controlled sandbox for virtual assets and cryptocurrencies. This demonstrates Vietnam’s commitment to advancing digital transformation in financial services, fostering opportunities for fintech enterprises, and driving innovation across the industry.

RELATED INSIGHTS​ 

April 11, 2025
Vietnam’s draft Personal Data Protection Law (PDPL) continues to evolve, with significant implications for businesses operating in the region. The latest draft, released to the public in March 2025, contains several noteworthy changes from the previous draft that businesses with operations in Vietnam should be aware of when developing their data protection strategies and compliance frameworks. The draft PDPL will be submitted to the vote of the National Assembly in May 2025 with a tentative entry into force on January 1, 2026. Key Changes in the Latest Draft PDPL 1. Redefined Categories of Personal Data The draft PDPL has made important revisions to personal data classifications: Basic personal data: An individual’s image is no longer classified as basic personal data. Sensitive personal data: Bank account information has been removed from this classification (and is now considered basic personal data), but two new categories have been added: (i) salary, allowances, and other income sources, and (ii) information on land users and information on land containing such information. Organizations should review their data classification schemes and update protection measures accordingly, particularly for salary and compensation information. 2. Data Encryption Requirements The draft PDPL explicitly states that encrypted data remains classified as personal data. Additionally, it mandates that sensitive personal data must be encrypted when stored, transmitted, received, or shared in cyberspace. Organizations and individuals can freely opt for one or more encryption solutions and encryption/decryption processes suitable for their personal data management and administration activities. 3. Biometric Data Processing The latest draft PDPL adds new protection requirements for biometric data. Organizations processing biometric data (such as fingerprints) must: Implement physical security measures for devices storing and transmitting biometric data. Use strong encryption methods during transmission and storage. Restrict access to biometric data. Have early-detection monitoring systems to detect violations of biometric
April 10, 2025
After making revisions to the initial draft notification released in November 2024, Thailand’s Electronic Transactions Development Agency (ETDA) has released an updated draft Notification on Additional Obligations for Digital Platform Service Operators of Online Marketplaces for Goods with Specific Characteristics under Section 18(2) of the Royal Decree on the Operation of Digital Platform Service Businesses Subject to Prior Notification B.E. 2565 (2022) B.E. … . A focus group session was also held to gather feedback from business operators. Below is a summary of key provisions in the new draft. Unchanged Items Some key concerns that remain unchanged from the previous version of the draft notification include the following: Offshore business operators running online marketplaces that act as intermediaries for the sale or exchange of goods and provide facility services for the sale of goods (referred to as “specific marketplace operators” in the draft) are required to establish a local entity in Thailand. However, the criteria for determining which operators are specific marketplace operators are still under discussion due to feedback from business operators. Specific marketplace operators must submit a compliance report to the ETDA along with their annual report each year. Specific marketplace operators must verify that “business users” (e.g., merchants) provide complete details about goods in accordance with product standardization requirements. Removed Obligations The updated draft notification has removed specific marketplace operators’ obligations to: Conduct Identity Assurance Level 2 (IAL2) verification of business users before onboarding them on their platforms. Submit a registry of business users’ information to the ETDA. Retain business users’ information for a specified retention period. Implement measures to filter reviews of products subject to specific standards. Revisions Key revisions made to the draft notification include the following: The effective date has been extended to 120 days after the notification’s publication in the Government Gazette,
March 18, 2025
On February 6, 2025, the prime minister of Vietnam, Pham Minh Chinh, chaired an online meeting to review the progress of Vietnam’s digital transformation agenda. The meeting assessed achievements under the National Digital Transformation Program and Project 06 on the development and application of population data, electronic identification, and authentication for national digital transformation for the period 2022-2025, with a vision to 2030, approved by the prime minister in 2022. The meeting also outlined key legislative and regulatory priorities for 2025, as set forth in Notice No. 56/TB-BPCP issued by the Government Office on February 23, 2025 (Notice 56). One of the central focuses of the 2025 digital transformation agenda is the development and issuance of laws and regulations governing digital technology, data management, and cybersecurity. Below are the key legal developments provided in Notice 56 that stakeholders should anticipate in the coming months. 1. Law on Digital Technology Industry The Ministry of Information and Communications (MIC) has been tasked with finalizing the draft Law on Digital Technology Industry (DTI Law) for submission to the National Assembly at its 9th session in May 2025. This law is expected to establish a comprehensive legal framework for the digital technology sector, addressing regulatory gaps in emerging fields such as artificial intelligence (AI), Internet of Things (IoT), cloud computing, big data and platform services to promote innovation, ensure data security, and support the growth of the digital economy in Vietnam. Concurrently, the MIC will expedite the issuance of guiding decrees to ensure the swift implementation of the DTI Law once enacted. 2. Law on Personal Data Protection and regulations guiding implementation of Data Law The Ministry of Public Security (MPS) is making efforts to finalize the long-anticipated Law on Personal Data Protection (PDPL)—data protection is currently governed by Decree No. 13/2023/ND-CP on
March 17, 2025
Tilleke & Gibbins has contributed the Cambodia, Myanmar, Thailand, and Vietnam chapters to Data Protection and Cybersecurity Regulation in Southeast Asia, a wide-ranging guide published by Drew Network Asia (DNA). The resource provides a comprehensive overview of data protection and cybersecurity laws across the region, offering practical insight into compliance requirements and regulatory developments affecting organizations that handle personal data or operate digital services in Southeast Asia. The guide begins with a regional overview, including the broader ASEAN context and cooperation initiatives. Jurisdiction-specific chapters follow a consistent structure—covering data privacy and governance obligations, security requirements and breach notification, outsourcing and cross-border data transfers, and broader accountability and compliance measures. This format allows readers to compare regulatory approaches across markets such as Brunei, Indonesia, Malaysia, the Philippines, Singapore, and others. In addition to the country chapters, the publication addresses cybersecurity and privacy engineering challenges, providing guidance for organizations and outlining obligations applicable to data controllers, processors, and intermediaries. A dedicated section on data breach management across ASEAN examines notification requirements, response considerations, and practical steps for managing incidents in a regional or global context. The guide is intended to serve as a practical reference, and the authors note that specific legal requirements may vary depending on sector, processing activity, or evolving legislation. Readers seeking more detailed advice can contact the practitioners listed in each chapter. The full guide is available for download using the button below or directly from the DNA website.