You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

June 26, 2024

Vietnam’s New Law on Credit Institutions Introduces Key Changes to Banking Operations

Subscribe to Updates

Vietnam’s new Law on Credit Institutions No. 32/2024/QH15, passed by the National Assembly on January 18, 2024 (“New LCI”), will take effect on July 1, 2024 (except for some clauses regarding the transfer of collateral, which will take delayed effect on January 1, 2025). The New LCI will replace the current Law on Credit Institutions issued in 2010 and amended in 2017, and aims to strengthen banking operations and enhance transparency in this sector.

Some key changes to banking operations introduced by the New LCI are set out below.

Lowering Credit Limits

Article 136 of the New LCI stipulates a gradual reduction of credit limits available to bank clients, to help credit institutions diversify their credit portfolios and minimize overdue risks. There are more stringent requirements for certain persons related to the bank (e.g., managers, auditors, and shareholders) and exemptions for special cases (e.g., approval by the prime minister, entrusted loans).

Specifically, the total balance of credit extended by commercial banks, cooperative banks, foreign bank branches, people’s credit funds, and microfinance institutions to a single client or to a client and related persons of that client will be reduced in stages from the current 15% of the credit institution’s equity capital (vốn tự có) for a single client and 25% for a client and related persons, to 10% for a single client and 15% for a client and related persons by 2029.

For non-bank credit institutions (i.e., general and specialized finance companies), the total balance of credit extended to a single client must not exceed 15% (down from 25%) of its equity capital, and the total balance of credit extended to a single client and related persons must not exceed 25% (down from 50%) of its equity capital.

It is worth noting that the above credit limits do not apply to (1) cases of entrusted loans for which the entrusted credit institution or foreign bank branch does not bear risk, (2) cases where the borrower is another credit institution or foreign bank branch, or (3) cases where the prime minister approves a higher credit limit.

Restricting Bancassurance Activities

Article 15.5 of the New LCI strictly prohibits credit institutions, foreign bank branches, and their managers, executives, and employees from combining the purchase of non-obligatory insurance products with the provision of banking products and services in any form.

This is a new regulation in the New LCI that emphasizes the commitment of the State Bank of Vietnam (SBV) in addressing the past problem of clients being forced to purchase insurance in order to be granted loans, thereby building client trust in both the banking and insurance sectors.

Recognizing Security Agent Services

Article 114.2(dd) of the New LCI explicitly regulates a new service to be provided by commercial banks, which is the provision of third-party security agent services to lenders who are international financial institutions, domestic and foreign credit institutions, and foreign bank branches.

This addresses a past issue in which local commercial banks were not allowed to be independent security agents, but would have to be a lender in a syndicated loan to act as a security agent for the other lenders, which could expose the bank to more risk. Under the New LCI, the local bank is no longer required to be a co-lender in a syndicated loan to act as the security agent for foreign lenders.

Further details on how banks can provide such security agent services may be provided by the SBV in the future.

Disposal of Real Estate Collateral

To facilitate debt recovery, Article 200 of the New LCI grants credit institutions, foreign bank branches, debt management companies, and asset management companies the right to transfer all or part of real estate projects that are secured assets to recover debts in accordance with the provisions of the Law on Real Estate Business and other relevant laws, without applying the conditions normally applicable to the transferor.

This regulation is expected to pave the way for banks to have more options to dispose of large projects mired in legal problems, thereby helping both the bank and the real estate enterprises to generate cash flow and reduce debt—this is especially true for banks with high real estate lending rates.

However, this regulation will only apply from January 1, 2025.

Outlook

Given the stringent requirements, the New LCI is anticipated to have a profound impact on banking operations in Vietnam, and will require changes from credit institutions to ensure their compliance status.

In addition, as the New LCI will take effect soon, a decree guiding the New LCI in detail should be in the final stages of adoption. Therefore, stakeholders are encouraged to stay informed and updated on further legal developments.

Related Professionals

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

November 24, 2025
A recent warning from the Central Bank of Myanmar (CBM) against cryptocurrency use upholds the country’s ongoing strategy of enforcing strict prohibitions on unauthorized cryptocurrency activities while also promoting the controlled development of a central bank digital currency (CBDC). The CBM’s warning, issued November 16, 2025, reminded the public of announcements in May 2019 and a notification in May 2020 confirming that all online and offline cryptocurrency transactions are strictly prohibited. The CBM also clarified that no financial institution in Myanmar is authorized to deal with digital currencies. The warning highlighted global risks, such as money laundering, scams, tax evasion, hacking, and severe financial losses caused by price volatility and insufficient regulation. The CBM urged the public to use only legitimate banking channels and avoid illegal cryptocurrency activities. The warning comes five months after the CBM issued a notification announcing the formation of the Central Committee for the Issuance of a Central Bank Digital Currency. This committee includes senior CBM officials, representatives from relevant ministries and the banking sector, and technology experts. Its main role is to research CBDC models, test secure digital payment systems, and ensure that any future implementation aligns with Myanmar’s monetary policy and financial stability objectives. Taken together, these two actions illustrate the CBM’s continued pursuit of its dual strategy to promote innovation through CBDC development while prohibiting cryptocurrency use. Businesses should note that while CBDC pilot programs may appear in the future, cryptocurrencies remain off-limits.
Read More
September 24, 2025
On September 12, 2025, the Bank of Thailand (BOT) officially released its AI Risk Management Guidelines for Financial Service Providers, building upon the draft guidelines issued in June 2025. The guidelines reflect a balanced approach, encouraging innovation while safeguarding financial stability and consumer protection. The guidelines are targeted at all financial service providers, including financial institutions and special financial institutions under the Financial Institution Business Act, as well as payment providers under the Payment Systems Act. The guidelines apply to both AI systems developed in-house and those developed by third parties that are adopted for use by financial service providers. AI Risk Management Guidelines The two main pillars in managing AI risk are (1) governance of AI system implementation and (2) AI system development and security controls, consisting of the following key elements: 1. Governance Stakeholder roles and responsibilities. Boards and senior management assume accountability for decisions and operations involving AI systems, and are responsible for defining roles and responsibilities for AI oversight. This includes establishing an AI system usage policy, designating personnel responsible for AI risk management, and building awareness of AI-related risk within the organization. Organizations are expected to foster internal capabilities to use AI securely and avoid overreliance that could compromise business continuity or customer service. AI system usage policy. Policies governing AI usage should align with organizational goals, regulatory obligations, and recognized responsible AI frameworks—such as the FEAT principles (fairness, ethics, accountability, and transparency). These policies should be reviewed regularly to respond to technological advancements and evolving risk profiles. Risk management throughout the AI lifecycle. Risk management should encompass the entire AI lifecycle, from establishing risk appetite to implementing continuous risk assessment and control measures tailored to specific use cases. Financial service providers should assess risks and impacts of AI usage on operations and customer services.
Read More
September 12, 2025
On September 10, 2025, Vietnam’s National Credit Information Center (CIC) reported to the Vietnam Cybersecurity Emergency Response Team (VNCERT) a suspected significant cybersecurity incident involving unauthorized access to the CIC’s credit information database. A hacker group has claimed responsibility and allegedly posted over 160 million records for sale, including sensitive personal and financial data. Implications for Banks and Financial Institutions Companies that share customers’ or potential customers’ personal data with the CIC for credit scoring or other purposes—and continue to act as a data controller for such data—may be obligated under Vietnam’s Personal Data Protection Decree (PDPD) and related regulations to: Notify A05 (Department of Cybersecurity and High-Tech Crime Prevention) and the State Bank of Vietnam without delay. Inform affected individuals if their personal data is at risk. Recommended Actions Companies that could be impacted by this data breach should take the following actions: Conduct an internal review of CIC-related data in their systems, and identify whether and how the systems have been affected by this incident. Assess whether to notify regulators and customers/potential customers. Enhance cybersecurity controls, monitor for suspicious activity, and implement additional safeguards to prevent secondary breaches.
Read More
August 25, 2025
To implement the recently issued Resolution on International Financial Centers in Vietnam (“IFC Resolution”), which is set to take effect on September 1, 2025 (see our previous article), the government of Vietnam is making every effort to formulate and issue guiding decrees—up to eight in total—before the effective date of the resolution. These decrees will establish key principles, define the rights and obligations of stakeholders, and outline permissible business activities within the IFCs, and serve as a foundation for the legal framework of the IFCs. Below are highlights of two draft decrees that have been released for public consultation. Draft Decree on IFC Establishment Ho Chi Minh City: The IFC in Ho Chi Minh City will focus on capital markets integrated with asset management services, fund management, insurance, financial products and financial derivatives; banking systems and money market products; fintech and financial innovation through sandbox mechanisms; specialized exchanges and new trading platforms; commodity markets, commodity and commodity derivatives exchanges linked to domestic and international physical commodity markets; and regional supply chain services, logistics hubs, maritime transport, and seaport infrastructure. Da Nang: The IFC in Da Nang will mainly develop green finance and commercial finance for SMEs and innovative enterprises, non-resident organizations and individuals (i.e., offshore financial services); cross-border trade activities linked to free trade zones, high-tech zones, new economic zones, and industrial zones; pilot control mechanisms for emerging models, such as digital assets, cryptocurrencies, and digital payments and transfers; new exchanges and trading platforms; investment funds, remittance funds, and small and medium fund management companies; startups in financial solutions for consumer services, tourism, e-commerce, logistics, and services within free trade zones; and related support, advisory, development, and legal services. Incentives: The People’s Committees of Ho Chi Minh City and Da Nang will need to decide on their list of
Read More