Decree 353/2025/ND-CP measures to implement Law on Digital Technology Industry

DECREE

Detailing a number of articles, and providing measures to organise and guide the implementation, of the Law on the Digital Technology Industry^[1]

Pursuant to Law No. 63/2025/QH15 on Organisation of the Government;

Pursuant to Law No. 71/2025/QH15 on the Digital Technology Industry;

Pursuant to Law No. 93/2025/QH15 on Science, Technology and Innovation;

At the proposal of the Minister of Science and Technology;

The Government promulgates the Decree detailing a number of articles, and providing measures to organise and guide the implementation, of the Law on the Digital Technology Industry.

Chapter I

GENERAL PROVISIONS

Article 1. Scope of regulation

1. This Decree details Articles 13, 19 and 20 of the Law on the Digital Technology Industry regarding digital technology industry activities; criteria for high-quality digital technology industry manpower; and attraction of, and preferential treatment for, digital technology talents.

2. This Decree provides measures to implement Article 8 of the Law on the Digital Technology Industry and details Article 21 of the Law on Science, Technology and Innovation regarding the regulatory sandbox for digital technology application products and services.

Article 2. Subjects of application

This Decree applies to domestic and foreign agencies, organisations, enterprises and individuals engaged or involved in the digital technology industry in Vietnam.

Chapter II

DIGITAL TECHNOLOGY INDUSTRY ACTIVITIES

Article 3. Support and incentives for digital technology industry activities

1. For digital technology products and services

a/ The manufacture of digital technology products and provision of digital technology services shall be entitled to the investment support and incentives specified in Article 28 of the Law on the Digital Technology Industry;

b/ The incentives for lease and procurement of digital technology products and services with state budget funds must comply with Article 31 of the Law on the Digital Technology Industry;

c/ The research and development of digital technology products and services shall be entitled to the incentives and support specified in Articles 16 and 17 of the Law on the Digital Technology Industry.

2. The investment in the construction of digital technology industry infrastructure facilities and concentrated digital technology zones shall be entitled to the priority regime, incentives and support specified in Articles 21 and 24 of the Law on the Digital Technology Industry.

3. For the semiconductor industry

a/ The development of the semiconductor industry shall be entitled to the specific mechanisms and policies specified in Article 39 of the Law on the Digital Technology Industry;

b/ Enterprises participating in the semiconductor supply chain shall be entitled to the incentives and support specified in Article 40 of the Law on the Digital Technology Industry.

4. Innovative start-up projects in the digital technology industry shall be entitled to the incentives and support specified in Article 29 of the Law on the Digital Technology Industry.

Article 4. Digital technology industry activities

1. The manufacture of digital technology products must comply with Clause 2, Article 13 of the Law on the Digital Technology Industry, including:

a/ Manufacture of hardware products, which is the performance of one or several of the following tasks: research and development, designing, manufacture, assembly, testing, inspection and packaging of hardware products and other tasks to turn out hardware products;

b/ Production of software or digital content products, which is the performance of one or several of the following tasks: research and development, analysis, creation, designing, programming, testing, inspection and packaging of software or digital content products and other tasks to turn out software or digital content products.

2. The provision of digital technology services must comply with Clause 3, Article 13 of the Law on the Digital Technology Industry.

Chapter III

DEVELOPMENT OF DIGITAL TECHNOLOGY INDUSTRY MANPOWER

Article 5. High-quality digital technology industry manpower

High-quality digital technology industry manpower refers to individuals working in the digital technology sector, who fall into one of the following categories:

1. Personnel currently working at digital technology enterprises meeting the criteria specified in Article 6 of this Decree.

2. Graduates of higher education institutions meeting the criteria specified in Article 7 of this Decree.

3. Persons working, lecturing and conducting researches at higher education institutions and research institutes meeting the criteria specified in Article 8 of this Decree.

4. Cadres, civil servants and public employees currently working at state agencies meeting the criteria specified in Article 9 of this Decree.

5. Individuals with outstanding contributions in the field of digital technology meeting the criteria specified in Article 10 of this Decree.

Article 6. Criteria for personnel currently working at digital technology enterprises to be recognised as high-quality digital technology industry manpower

Persons currently working at digital technology enterprises shall be recognised as high-quality digital technology industry manpower when meeting one of the following criteria:

1. Holding the position of chairperson of the Members’ Council, chairperson of the Board of Directors, Chief Executive Officer or Executive Officer, or equivalent positions in digital technology enterprises that generate a revenue of VND 26 trillion or more in at least one of the latest 3 years according to their published financial statements.

2. Being the personnel directly engaged in digital technology industry activities at enterprises and falling into one of the following cases:

a/ Being Vietnamese citizens with an average income from digital technology industry activities in the last 2 years at least 5 times higher than Vietnam’s average per-capita GDP as published by the country;

b/ Being foreigners currently working in a developed country as published by the United Nations or the World Bank and earning an average income from digital technology industry activities in the last 2 years at least 3 times higher than such country’s per-capita GDP, as published by that country;

c/ Being foreigners other than those specified in Point b of this Clause, with an average income from digital technology industry activities in the last 2 years at least 5 times higher than the per-capita GDP of the country where they are working, as published by that country.

Article 7. Criteria for higher education institution graduates to be recognised as high-quality digital technology industry manpower

Persons who have graduated from higher education institutions in the last 3 years shall be recognised as high-quality manpower in the digital technology industry if meeting one of the following criteria:

1. Having graduated with a bachelor’s degree with distinction or higher in digital technology or information technology disciplines or cognate disciplines from higher education institutions on the list of the world’s top 500 higher education institutions according to one of the most recently published rankings of the Quacquarelli Symonds (UK), Times Higher Education (UK), Shanghai Ranking Consultancy (China), or US News & World Report (USA), or a ranking published by the Ministry of Education and Training (if any).

2. Having graduated with a bachelor’s degree with high distinction or higher in digital technology or information technology disciplines or cognate disciplines from a higher education institution on the list of top 50 higher education institutions in a domestic prestigious ranking in accordance with the law on higher education.

Article 8. Criteria for persons working, lecturing and conducting researches at higher education institutions and research institutes to be recognises as high-quality digital technology industry manpower

Persons working, lecturing or conducting researches in higher education institutions or research institutes shall be recognised as high-quality digital technology industry manpower if meeting one of the following criteria:

1. Being deans or institute directors, or holders of an equivalent or higher position and currently working at or managing digital technology or information technology faculties, institutes, schools, or research establishments of higher education institutions on the list of the world’s top 500 higher education institutions according to one of the most recently published rankings of the Quacquarelli Symonds (UK), Times Higher Education (UK), Shanghai Ranking Consultancy (China), or US News & World Report (USA), or a ranking published by the Ministry of Education and Training (if any).

2. Being lecturers or scientists holding a doctoral degree or higher, with at least 3 years of experience working or conducting researches in digital technology or information technology in a higher education institution on the list of the world’s top 500 higher education institutions according to one of the most recently published rankings of the Quacquarelli Symonds (UK), Times Higher Education (UK), Shanghai Ranking Consultancy (China), or U.S. News & World Report (USA), or a ranking published by the Ministry of Education and Training (if any).

Article 9. Criteria for cadres, civil servants and public employees working in state agencies to be recognised as high-quality digital technology industry manpower

Cadre, civil servant and public employees working at state agencies shall be recognised as high-quality digital technology industry manpower if meeting one of the following criteria:

1. Holding the position of head of division or an equivalent or higher position in a department-level agency under a ministry, or in a provincial-level agency or higher, and being directly engaged in formulating, managing or implementing policies on the digital technology industry or information technology industry, or in researching, developing and applying digital technology or information technology.

2. Being civil servants or public employees who have been admitted or appointed within the last 3 years under Point a, Clause 4, Article 19 of the Law on the Digital Technology Industry.

3. Being civil servants or public employees who meet the criteria specified in Article 10 of this Decree.

Article 10. Criteria for individuals with outstanding contributions in the digital technology field to be recognised as high-quality digital technology industry manpower

Individuals with outstanding contributions in the digital technology field shall be recognised as high-quality digital technology industry manpower if meeting one of the following criteria:

1. Having a scientific article published in a journals in the Q1 group according to the Scopus or Web of Science within the last 5 years.

2. Being the authors or co-authors of at least 1 intellectual property subject matter protected under the law on intellectual property, which is a digital technology, or a digital technology product or service on the List of strategic technologies and strategic technology products approved by the Prime Minister or on the List of key digital technology products and services issued by the Minister of Science and Technology.

Article 11. Policies applicable to high-quality digital technology industry manpower

1. Persons meeting the criteria for recognition as high-quality digital technology industry manpower as specified in this Decree shall be entitled to the preferential policies specified in Article 19 of the Law on the Digital Technology Industry.

2. Ministries, sectors and localities shall, within the scope of their assigned sectors, fields and localities, promulgate, or submit to competent authorities for promulgation, guidance on the order and procedures for application of the preferential policies (if any) and organise the implementation of policies to attract high-quality digital technology industry manpower as specified in Article 19 of the Law on the Digital Technology Industry for persons meeting the criteria specified in this Decree.

Article 12. Attraction of, and preferential treatment for, digital technology talents

1. Digital technology talents shall be entitled to policies on attraction of, and preferential treatment for, talents in science, technology and innovation under Article 54 of the Law on Science, Technology and Innovation and guiding and detailing documents.

2. When necessary, ministries, sectors and localities shall decide on support and incentive policies for digital technology talents in the sectors and fields under their respective management under Clause 2, Article 20 of the Law on the Digital Technology Industry.

Chapter IV

THE REGULATORY SANDBOX FOR DIGITAL TECHNOLOGY APPLICATION PRODUCTS AND SERVICES

Article 13. Objectives of the regulatory sandbox

1. Organisations and enterprises participating in the regulatory sandbox shall be exempt from complying with certain regulations with limitations on duration, location and scope.

2. To encourage innovation activities and promote the smartification of sectors and fields.

3. To create a testing environment to evaluate the features, risks, costs, and benefits of new products and services.

4. To control and mitigate risks when applying new products and services.

5. To use results of the application of the regulatory sandbox as a basis for state agencies to consider and evaluate arising risks before deciding whether to adjust relevant laws to bring new products and services into use and to the market.

Article 14. Relevant stakeholders in the regulatory sandbox

1. Organisations and enterprises licensed to apply the regulatory sandbox.

2. Agencies competent to grant permission for the application of the regulatory sandbox.

3. Organisations and individuals participating in the regulatory sandbox.

4. Other organisations and individuals involved in the regulatory sandbox.

Article 15. Conditions and criteria for products and services for which the regulatory sandbox is applied

Products and services for which the regulatory sandbox is applied under this Decree must meet the following conditions and criteria:

1. Being digital technology application products and services formed through the convergence, integration or combination of different digital technologies or between digital technologies and products and services from other sectors and fields.

2. The use of these products and services is not yet regulated by law or differs from current law, preventing their implementation.

3. Organisations or enterprises proposing the regulatory sandbox have formulated a plan to manage and remedy risks and protect the interests of participants and related organisations and individuals during the application of the regulatory sandbox.

4. The use of products and services constitutes an innovative step and is capable of bringing about benefits and added value, and promoting technological development.

Article 16. Agencies competent to grant permission for the application of the regulatory sandbox

1. People’s Committees of provinces and centrally run cities (below referred to as province-level People’s Committees) shall receive and coordinate with line ministries and related agencies in considering and deciding to grant permission for the application of the regulatory sandbox for digital technology application products and services when the location, scope, and object of application of the regulatory sandbox are limited to one or more than one area or geographical locality or cover the entire geographical locality under their management.

2. Ministries, ministerial-level agencies and the Minister of National Defence shall receive and coordinate with related agencies in considering and deciding to grant permission for the application of the regulatory sandbox for digital technology application products and services under their management when the location, scope and object of the regulatory sandbox are limited to several areas or geographical localities or cover the entire geographical localities of 2 or more provinces.

3. Ministries, ministerial-level agencies, and provincial-level People’s Committees shall, within the ambit of their functions and responsibilities for managing their respective sectors and fields, coordinate with one another in giving their opinions during the process of considering and deciding to grant permission for the application of the regulatory sandbox. In case difficulties or problems arise regarding the competence to grant permission for the application of the regulatory sandbox, they shall report thereon to the Prime Minister for consideration and decision.

4. The competence to grant permission for the application of the regulatory sandbox for data products and services must comply with the law on data.

Article 17. Principles of consideration and approval of organisations and enterprises participating in the regulatory sandbox

1. To ensure the principles of voluntariness and equality among organisations and enterprises in participating in and exercising their rights and performing their obligations during the application of the regulatory sandbox.

2. To ensure publicity and transparency of the criteria, conditions, and procedures for evaluating and selecting organisations and enterprises to participate in the regulatory sandbox.

Article 18. Duration, place, scope and objects of application of the regulatory sandbox

1. Duration of application of the regulatory sandbox

Based on actual circumstances, agencies competent to grant permission for the application of the regulatory sandbox shall decide on the duration of application of the regulatory sandbox, which must not exceed 3 years from the date of granting the permission. The regulatory sandbox may be extended once only, for a maximum period of 3 years from the date the competent agencies permit the extension.

2. Place of application the regulatory sandbox

Based on the actual circumstances, agencies competent to grant permission for the application of the regulatory sandbox shall decide on the place of application of the regulatory sandbox, which shall be limited to one or more than one locality or geographical areas or the entire geographical area of a province, or in several localities or geographical areas, or the entire geographical areas of several provinces.

3. Scope and objects of application of the regulatory sandbox

Organisations and enterprises licensed to apply the regulatory sandbox may only provide products and services for which the regulatory sandbox is applied within the scope and object of application of the regulatory sandbox specified in the decision granting permission for the application of the regulatory sandbox.

Article 19. Suspension of the application of the regulatory sandbox

1. An agency competent to grant permission for the application of the regulatory sandbox shall consider and decide on the suspension of the regulatory sandbox in one of the following cases:

a/ An incident occurs during the application of the regulatory sandbox;

b/ The agency competent to grant permission for the application of the regulatory sandbox detects a risk of an incident occurring that requires additional risk control measures to ensure safety during the application of the regulatory sandbox;

c/ The organisation or enterprise licensed to apply the regulatory sandbox detects a risk of an incident occurring and needs to supplement risk control measures to ensure safety during the application of the regulatory sandbox, or other arising issues according to the enclosed report and explanation.

2. The duration of suspension of the regulatory sandbox shall be decided by the agency competent to grant permission for the application of the regulatory sandbox and shall not be included in the duration of application of the regulatory sandbox stated in the decision granting permission for the application of the regulatory sandbox; the duration of application ò the regulatory sandbox shall be automatically extended corresponding to the suspension duration.

3. The agency competent to grant permission for the application of the regulatory sandbox shall decide to suspend the regulatory sandbox in the cases specified in Points a and b, Clause 1 of this Article by issuing a decision on suspension of the regulatory sandbox for digital technology application products and services, made according to Form No. TNCNS05 provided in the Appendix to this Decree. The suspension specified in Point c, Clause 1 of this Article must comply with Articles 30 and 31 of this Decree.

4. Within 30 days after obtaining the decision on suspension of the application of the regulatory sandbox, the organisation or enterprise licensed to apply the regulatory sandbox shall remedy the incident or adopt a plan to remedy the incident, ensuring safety for the continued application. The organisation or enterprise shall submit a written report to the agency competent to grant permission for the application of the regulatory sandbox and may resume the application of the regulatory sandbox only after obtaining written approval from the competent agency.

5. Past the aforementioned 30-day duration, if the organization or enterprise licensed to apply the regulatory sandbox fails to remedy the incident or to adopt a plan to remedy the incident, ensuring safety for the continued application, the agency competent to grant permission for the application of the regulatory sandbox shall issue a decision on termination of the application of the regulatory sandbox ahead of schedule.

Article 20. Termination of the application of the regulatory sandbox

Cases of termination of application of the regulatory sandbox include:

1. Termination of the application of regulatory sandbox upon the expiry of the duration specified in a decision granting permission for the application of the regulatory sandbox.

2. Termination of the application of regulatory sandbox ahead of schedule.

The agency competent to grant permission for the application of the regulatory sandbox shall consider and decide to terminate the application of regulatory sandbox ahead of schedule by issuing a decision on ahead-of-schedule termination of the application of regulatory sandbox, made according to Form No. TNCNS07 provided in the Appendix to this Decree in the following cases:

a/ Official regulations governing the product or service for which the regulatory sandbox is applied have been completed and take effect;

b/ There is a request to terminate the regulatory sandbox ahead of schedule from the organisation or enterprise licensed to apply the regulatory sandbox;

c/ The organisation or enterprise licensed to apply the regulatory sandbox is detected providing false or fraudulent information;

d/ The organisation or enterprise licensed to apply the regulatory sandbox fails to apply the regulatory sandbox within 90 days from the date of approval, except cases of force majeure events or objective obstacles which are approved in writing by the agency competent to grant permission for the application of the regulatory sandbox;

dd/ The organisation or enterprise licensed to apply the regulatory sandbox fails to properly and fully implement the content of the decision granting permission for the application of the regulatory sandbox and commitments in the dossier of request for participation in the regulatory sandbox;

e/ A big systematic incident occurs, causing irreparable damage, affecting public safety or human life and health, or disrupting market order;

g/ The regulatory sandbox is terminated ahead of schedule in the case specified in Clause 5, Article 19 of this Decree.

Article 21. Rights and responsibilities of agencies competent to grant permission for the application of the regulatory sandbox

The agency competent to grant permission for the application of the regulatory sandbox have the following powers and responsibilities:

1. To organise periodical or unscheduled inspection during the process of application of the regulatory sandbox; evaluate the situation of application; evaluate the application of risk control measures by organisations and enterprises during the process of application of the regulatory sandbox; promote digital transformation, prioritise online supervision of, and connection with, enterprises in the inspection of the application of the regulatory sandbox.

2. To request organisations and enterprises licensed to apply the regulatory sandbox to supplement risk control measures when there is a risk of an incident that may affect safety under Clause 1, Article 19 of this Decree; to request the provision of reports and explanations on arising issues.

3. To consider and decide on the granting of permission, extension, suspension, continuation, adjustment of implementation plans, ahead-of-schedule termination, and certification of completion of the regulatory sandbox.

4. To evaluate and determine the results of the regulatory sandbox so as to consider and decide to certify the completion of the application of the regulatory sandbox or extension of its application.

5. To receive, consider and handle within its competence, or propose related agencies and organisations, or organisations or enterprises licensed to apply the regulatory sandbox to handle, recommendations and feedback of participants in the regulatory sandbox or third parties regarding the application of the regulatory sandbox.

6. When necessary, to assume the prime responsibility for, and coordinate with related agencies and organisations in, researching, formulating, and proposing plans to improve regulations related to products and services for which the regulatory sandbox is applied.

7. To be exempted or excluded from liability under Article 22 of the Law on Science, Technology and Innovation.

Article 22. Rights and responsibilities of organisations and enterprises licensed to apply the regulatory sandbox

Organisations and enterprises licensed to apply the regulatory sandbox has the following rights and responsibilities:

1. To comply with the civil law, the laws on data, personal data protection and consumer rights protection, and other relevant laws, except articles and clauses they are not required to apply or permitted to apply as stated in the decision granting permission for the application of the regulatory sandbox within the licensed duration, place, scope, and objects of application of the regulatory sandbox.

2. To fully perform the responsibility for protecting participants in the regulatory sandbox as specified in Article 23 of the Law on Science, Technology and Innovation.

3. To supplement risk control measures when there is a risk of an incident that may affect safety as specified in Clause 1, Article 19 of this Decree; to report and provide explanations on arising issues at the request of the agency competent to grant permission for the application of the regulatory sandbox.

4. To coordinate in control and evaluation activities; to promote digital transformation and enhance online control and evaluation of the regulatory sandbox; to be responsible for connecting and providing information on the application of the regulatory sandbox at the request of the agency competent to grant permission for the application of the regulatory sandbox.

5. To report on results of the application of the regulatory sandbox under Article 34 of this Decree.

6. To request extension of the application of the regulatory sandbox, adjustment of the plan on application of the regulatory sandbox, ahead-of-schedule termination of the regulatory sandbox, and certification of completion of the application of the regulatory sandbox under this Decree.

7. To request the agency competent to grant permission for the application of the regulatory sandbox to support, clarify difficulties, and provide guidance during the application of the regulatory sandbox.

8. To be exempted and excluded from liability in the application of the regulatory sandbox as specified in Article 22 of the Law on Science, Technology and Innovation.

Article 23. Principles of formulating dossiers of request for application, extension, adjustment, and termination of the regulatory sandbox

1. Dossiers must be made in Vietnamese. Any document issued, notarised or certified by foreign authorities or entities must be consularly legalised in accordance with Vietnam’s law (except cases of exemption from consular legalisation according to the law on consular legalisation) and translated into Vietnamese.

2. Organisations and enterprises formulating dossiers of request for the application, extension, adjustment, and termination of the regulatory sandbox shall take full responsibility before law for the accuracy and truthfulness of the information they provide.

Article 24. Dossiers of request for application of the regulatory sandbox

1. A written request for participating in the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS01 provided in the Appendix to this Decree.

2. A plan on the application of the regulatory sandbox (including duration, place, scope and objects of application of the regulatory sandbox, and other related information, if any).

3. An impact assessment report on participants in the regulatory sandbox and related organisations and individuals.

4. A report assessing the benefits, novelty, new value, innovation, and commercialisation potential of the digital technology application product or service requested for application of the regulatory sandbox.

5. A plan on safety assurance (regarding property, health, life, lawful rights and interests of participants, the community, and society; assurance of cyber information security and cybersecurity; risk control measures; mechanisms for settling complaints of participants in the regulatory sandbox; scope and measures for damage compensation and plans on remediation of consequences in accordance with the civil law during and after the application of the regulatory sandbox).

6. Technical plans for providing the digital technology application products and services for which the regulatory sandbox is applied (including documents on technical characteristics and parameters; technical standards and regulations; standards and quality; related technical measures and solutions; and maintenance plans and other related technical contents, if any).

Article 25. Procedures for consideration and approval of participation in the regulatory sandbox

1. An organisation or enterprise wishing to register for participation in the regulatory sandbox shall submit 1 set of dossier of request specified in Article 24 of this Decree to the agency competent to grant permission for the application of the regulatory sandbox for consideration and handling. Such dossier shall be sent by post or hand-delivery to the single-window division of the agency competent to grant permission for the application of the regulatory sandbox or submit online through the National Public Service Portal.

2. Within 5 working days after receiving the dossier, the agency competent to grant permission for the application of the regulatory sandbox shall issue a written confirmation of receiving the complete and valid dossier. In case the dossier is incomplete or invalid, it shall issue a written request for the organisation or enterprise to supplement the dossier.

3. If, within 15 days after the agency competent to grant permission for the application of the regulatory sandbox requests supplementation of the dossier, the organisation or enterprise wishing to register for participating in the regulatory sandbox fails to supplement the dossier as requested, the competent agency shall issue a written notice on returning the dossier.

4. Within 60 days after receiving the valid dossier, the agency competent to grant permission for the application of the regulatory sandbox shall coordinate with related agencies in completing the appraisal of the dossier (including also actual inspection when necessary).

5. In case the dossier needs to be explained or clarified, the agency competent to grant permission for the application of the regulatory sandbox shall issue a written request to the organisation or enterprise to provide the explanations or clarifications within 15 days after receiving the request.

After 15 days, if the organisation or enterprise fails to provide the requested written explanation or clarification, the agency competent to grant permission for the application of the regulatory sandbox shall issue a written notice on returning the dossier.

6. After the appraisal, the agency competent to grant permission for the application of the regulatory sandbox shall issue a decision granting permission for the application of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS02 provided in the Appendix to this Decree. In case of refusal, it shall reply in writing, clearly stating the reasons.

7. Within 90 days after the agency competent to grant permission for the application of the regulatory sandbox issues a decision granting permission for the application of the regulatory sandbox for the digital technology application product or service, the organisation or enterprise licensed to apply the regulatory sandbox must apply the regulatory sandbox for the digital technology application product or service, except cases of force majeure events or objective obstacles which are approved in writing by the competent agency.

In case the organisation or enterprise fails to apply the regulatory sandbox for the digital technology application product or service as prescribed, the agency competent to grant permission for the application of the regulatory sandbox shall issue a decision on ahead-of-schedule termination of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS07 provided in the Appendix to this Decree.

Article 26. Dossiers of request for extension of the regulatory sandbox

1. A written request for extension of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS03 provided in the Appendix to this Decree.

2. A report on the results of application of the regulatory sandbox of the digital technology application product or service, made according to Form No. TNCNS11 provided in the Appendix to this Decree and a proposed plan on extension of the regulatory sandbox.

Article 27. Procedures for extension of the regulatory sandbox

1. A dossier of request for extension of the regulatory sandbox must be submitted to the agency competent to grant permission for the application of the regulatory sandbox at least 60 days before the end of the duration for application of the regulatory sandbox. Such dossier shall be sent via the postal service or hand-delivered to the single-window division of the agency competent to grant permission for the application of the regulatory sandbox or submit online through the National Public Service Portal.

2. After receiving a complete and valid dossier for extension of the regulatory sandbox, no later than 15 days before the end of the duration for application of the regulatory sandbox, the agency competent to grant permission for the application of the regulatory sandbox shall consider and decide to extend the duration of the regulatory sandbox by issuing a decision on extension of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS04 provided in the Appendix to this Decree; in case of refusal for extension, it shall reply in writing, clearly stating the reason.

Article 28. Dossiers of request for termination of the regulatory sandbox

1. A written request for termination of the regulatory sandbox (ahead of time or certification of completion of application of the regulatory sandbox) for the digital technology application product or service, made according to Form No. TNCNS06 provided in the Appendix to this Decree.

2. A report on the results of application of the regulatory sandbox of the digital technology application product or service by the time of proposing the termination of the regulatory sandbox, made according to Form No. TNCNS11 provided in the Appendix to this Decree; and a report explaining the reasons for requesting the termination.

Article 29. Procedures for termination of the regulatory sandbox

1. A dossier of request for termination of the regulatory sandbox shall be submitted to the agency competent to grant permission for the application of the regulatory sandbox at least 30 days before the proposed termination date. Such dossier shall be sent by post or hand-delivery to the single-window division of the agency competent to grant permission for the application of the regulatory sandbox or submit online through the National Public Service Portal.

2. Within 15 days after receiving the complete and valid dossier, the agency competent to grant permission for the application of the regulatory sandbox shall consider and decide to terminate the regulatory sandbox by issuing a decision on ahead-of-schedule termination of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS07 or a decision certifying the completion of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS10 provided in the Appendix to this Decree.

Article 30. Dossiers of request for adjustment of the regulatory sandbox

1. A dossier of request for adjustment of the regulatory sandbox (adjustment of the plan on application of the regulatory sandbox or suspension of the regulatory sandbox) for the digital technology application product or service, made according to Form No. TNCNS08 provided in the Appendix to this Decree.

2. A report on the results of application of the regulatory sandbox for the digital technology application product or service by the time of proposing adjustment of the regulatory sandbox, made according to Form No. TNCNS11 provided in the Appendix to this Decree; and a report explaining the reasons for requesting the adjustment.

Article 31. Procedures for adjustment of the regulatory sandbox

1. A dossier of request for adjustment of the regulatory sandbox shall be submitted to the agency competent to grant permission for the application of the regulatory sandbox at least 30 days before the proposed adjustment date. Such dossier shall be sent by post or hand-delivery to the single-window division of the agency competent to grant permission for the application of the regulatory sandbox or submit online through the National Public Service Portal.

2. Within 15 days after receiving the complete and valid dossier, the agency competent to grant permission for the application of the regulatory sandbox shall consider and decide to adjust the regulatory sandbox by issuing a decision on adjustment of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS09 or a decision on suspension of the regulatory sandbox for the digital technology application product or service, made according to Form No. TNCNS05 provided in the Appendix to this Decree, or refuse in writing, clearly stating the reasons.

Article 32. Certification of completion of the regulatory sandbox

1. Upon the completion of the regulatory sandbox within the duration specified in Clause 1 of Article 20, or ahead-of-schedule termination of the regulatory sandbox in the cases specified in Points a and b, Clause 2, Article 20 of this Decree, the organisation or enterprise licensed to apply the regulatory sandbox shall submit a dossier of request to the competent agency for consideration and decision to certify the completion of the regulatory sandbox as specified in Articles 28 and 29 of this Decree.

2. The agency competent to grant permission for the application of the regulatory sandbox shall issue a decision certifying the completion of the regulatory sandbox for the digital technology application product or service under Articles 28 and 29 of this Decree.

Article 33. Supervision of the process of application of the regulatory sandbox

1. Agencies competent to grant permission for the application of the regulatory sandbox shall supervise the process of application of the sandbox through the following activities:

a/ Collecting and synthesising documents, information and data provided by organisations, enterprises, participants in the regulatory sandbox, and competent agencies, or collecting documents, information and data from actual inspection;

b/ Evaluating testing activities based on the collected documents, information and data as specified in Point a, Clause 1 of this Article;

c/ Issuing written warnings and recommendations to organisations and enterprises licensed for the application of the regulatory sandbox in case of detecting potential risks;

d/ Suspending the regulatory sandbox under Article 19 or terminating ahead of schedule the regulatory sandbox under Article 20 of this Decree.

2. Agencies competent to grant permission for the application of the regulatory sandbox shall coordinate with related agencies in conducting actual inspection every six months or on an unscheduled manner when risk-related issues are detected, requiring the collection of additional documents, information and data. The periodical actual inspection must be notified to organisations or enterprises licensed to apply the regulatory sandbox at least 5 working days before the inspection is conducted.

Article 34. Reporting and information provision regimes

1. Organisations and enterprises licensed to apply the regulatory sandbox shall submit reports every six months, a report on the results of application of the regulatory sandbox after its completion, made according to Form No. TNCNS11 provided in the Appendix to this Decree, or ad hoc reports at the request of competent agencies upon detection of risks.

2. Reports and provision of information shall be submitted in electronic or paper form to the agencies competent to grant permission for the application of the regulatory sandbox and simultaneously to the National Information System on the Digital Technology Industry.

Chapter V

IMPLEMENTATION PROVISIONS

Article 35. Effect

1. This Decree takes effect on January 1, 2026.

2. The Government’s Decree No. 71/2007/ND-CP of May 3, 2007, detailing and guiding a number of articles of the Law on Information Technology regarding the information technology industry, ceases to be effective from the effective date of this Decree, except Article 36 of this Decree.

Article 36. Transitional provisions

Contents related to information technology industry activities that were approved or implemented before the effective date of Law No. 71/2025/QH15 on the Digital Technology Industry, shall continue to comply with Law No. 67/2006/QH11 on Information Technology and other relevant legal documents detailing the information technology industry, except cases where agencies, organisations, enterprises or individuals choose to comply with this Decree.-

On behalf of the Government
For the Prime Minister
Deputy Prime Minister
NGUYEN CHI DUNG