Decree 382/2026/ND-CP amend Decree 94/2025/ND-CP regulatory sandbox in banking sector

DECREE

Amending and supplementing a number of articles of the Government’s Decree No. 94/2025/ND-CP dated April 29, 2025, providing the regulatory sandbox in the banking sector

Pursuant to the Law on Organization of the Government No. 63/2025/QH15, amended and supplemented under Law No. 137/2024/QH15;

Pursuant to Law on the State Bank of Vietnam No. 46/2010/QH12, amended and supplemented under Law No. 14/2022/QH15 and Law No. 23/2026/QH16;

Pursuant to the Law on Credit institutions. No. 32/2024/QH15, amended and supplemented under Law No. 43/2024/QH15, Law No. 96/2025/QH15 and Law No. 142/2025/QH15;

At the proposal of the Governor of the State Bank of Vietnam;

The Government hereby promulgates the Decree amending and supplementing a number of articles of the Government’s Decree No. 94/2025/ND-CP dated April 29, 2025, providing the regulatory sandbox in the banking sector.

Article 1. To amend and supplement a number of clauses of Article 7

1. To amend and supplement Clause 4 as follows:

“4. Dossiers shall be submitted via public postal services as prescribed by the Prime Minister, through services hired from enterprises or individuals, through authorized persons in accordance with law, or by hand-delivery to the State Bank’s Single-Window Division, or online via the National Public Service Portal.”.

2. To add Clause 6 after Clause 5 as follows:

“6. Where documents constituting a dossier as specified in this Decree have been integrated into a national database or specialized database, the State Bank shall retrieve and use information from such national database or specialized database on the basis of information exchange and provision among state management agencies.

Where judicial record information of Vietnamese citizens or foreigners has been integrated into the Judicial Records Database, the State Bank shall retrieve and use information from the Judicial Records Database. If such information cannot be retrieved or the retrieved information is incomplete or inaccurate, the State Bank shall send a written request to the agency managing the Judicial Records Database to provide judicial record information of the legal representative and Chief Executive Officer of the organization applying for participation in the regulatory sandbox for settlement of administrative procedures.”.

Article 2. To amend and supplement Point b Clause 2 Article 8

“b) Its legal representative or Chief Executive Officer must possess a university or higher degree in economics, business administration, law, information technology, finance, banking, accounting or audit, or have at least 2 years’ experience working as a manager or an executive officer of an organization engaged in the financial or banking sector, intermediary payment, information technology and does not fall into the cases banned by law from holding certain posts.”.

Article 3. To amend, supplement, and repeal a number of clauses of Article 9

1. To repeal Clause 3.

2. To amend and supplement Clause 4 as follows:

“4. The Scheme describing the Fintech solution registered for participation in the regulatory sandbox, showing a simulation model or demonstration of the Fintech solution; group of potential customers; an explanation of the technical solution for the information system used for the Fintech solution participating in the regulatory sandbox, demonstrating satisfaction of the requirements for assurance of information system security by level; and the applicant’s full satisfaction of the criteria specified in Clause 1 Article 8 as specifically guided in Appendix II to this Decree.”.

3. To amend and supplement Clause 6 as follows:

“6. Personnel files, including curricula vitae (made within 6 months before the date of dossier submission), copies of degrees and diplomas proving professional qualifications and capacity of the legal representative or Chief Executive Officer, or a document issued by the competent representative of the entity where the legal representative or Chief Executive Officer has worked or is working, certifying the position held and the period during which such position was held, or copies of documents proving the position held and the period during which such position was held by the legal representative or Chief Executive Officer at the entity.

The State Bank shall proactively retrieve and use available information from the Database on Diplomas and Certificates in substitution for dossier documents comprising diplomas proving the professional capacity and qualifications of the legal representative and Chief Executive Officer. If the information cannot be retrieved or the retrieved information is incomplete or inaccurate, the State Bank shall request the organization applying for participation in the regulatory sandbox to supplement the dossier component for processing of the administrative procedure.”.

4. To amend and supplement Clause 7 as follows:

“7. Copies of documents evidencing that the organization applying for participation in the regulatory sandbox has been legally established and is operating in compliance with the law, including the enterprise registration certificate, establishment license or establishment and operation license; and the investment registration certificate (if any).

The State Bank shall proactively retrieve and use available information from the National Business Registration Database, specialized databases or the National Investment Database in substitution for dossier documents comprising the enterprise registration certificate, establishment license, establishment and operation license, and investment registration certificate (if any) of the organization applying for participation in the regulatory sandbox. If the information cannot be retrieved or the retrieved information is incomplete or inaccurate, the State Bank shall request the organization applying for participation in the regulatory sandbox to supplement the dossier component for processing of the administrative procedure.”.

Article 4. To amend and supplement a number of clauses of Article 10

1. To amend and supplement Clause 1 as follows:

“1. In case of sending dossiers via public postal service as prescribed by the Prime Minister, through services hired from enterprises or individuals, through authorized in accordance with law, or by hand-delivery to the State Bank’s Single-Window Division, an organization applying for participation in the regulatory sandbox shall send one dossier sets and one USB of application for a certificate of participation in the regulatory sandbox under Article 9 of this Decree.”.

2. To amend and supplement Clause 3 as follows:

“3. Within 80 days after sending a letter of confirmation of the receipt of a complete and valid dossier, the State Bank shall coordinate with related ministries in appraising the dossier, covering also an on-spot examination if necessary.

After receiving a complete and valid dossier, the State Bank shall send a consultation request to related ministries. Within 20 days after receiving the State Bank’s consultation request, the consulted ministries shall send their written opinions to the State Bank.

In case an on-spot examination is required, the State Bank shall send a written request to related ministries for assigning their officials to join the on-spot examination team. Within 7 days after receiving the State Bank’s request, the related ministries shall send to the State Bank documents on assignment of officials to join the on-spot examination team. The on-spot examination shall be notified to the applying organization at least 5 days before the examination is carried out at the working office of such organization.

In case the dossier needs to be explained or clarified, the State Bank shall request in writing the applying organization to give explanations and complete the dossier. The applying organization may send explanations and supplemented dossier only once. The dossier of explanations and supplementations shall clearly state the contents revised or supplemented compared with the dossier initially submitted; clarify the matters as requested by the State Bank; and be accompanied by supporting and comparative documents (if any). The organization shall be responsible for the completeness and accuracy of the supplemented dossier and documents.

45 days after the State Bank sends the request for explanation and dossier completion, if the applying organization still fails to send explanations and supplemented dossier, the State Bank shall issue a notice of return of the dossier to the applying organization. The time for explanation and dossier completion will not be included in the dossier appraisal period.

After receiving a completely supplemented dossier of the applying organization, the State Bank shall send a consultation request to related ministries. Within 10 days after receiving the State Bank’s consultation request, the consulted ministries shall send their written opinions to the State Bank.”.

Article 5. To amend and supplement Point c Clause 2 Article 11

“c) Its legal representative or Chief Executive Officer must possess a university or higher degree in economics, business administration, law, information technology, finance, banking, accounting or audit, or have at least 2 years’ experience working as a manager or an executive officer of an organization engaged in the financial or banking sector, intermediary payment, information technology and does not fall into the cases banned by law from holding certain posts;”.

Article 6. To amend, supplement, and repeal a number of clauses of Article 12

1. To repeal Clause 3.

2. To amend and supplement Clause 6 as follows:

“6. Personnel files, including curricula vitae (made within 6 months before the date of dossier submission), copies of degrees and diplomas proving professional qualifications and capacity of the legal representative or Chief Executive Officer, or a document issued by the competent representative of the entity where the legal representative or Chief Executive Officer has worked or is working, certifying the position held and the period during which such position was held, or copies of documents proving the position held and the period during which such position was held by the legal representative or Chief Executive Officer at the entity.

The State Bank shall proactively retrieve and use available information from the Database on Diplomas and Certificates in substitution for dossier documents comprising diplomas proving the professional capacity and qualifications of the legal representative and Chief Executive Officer. If the information cannot be retrieved or the retrieved information is incomplete or inaccurate, the State Bank shall request the organization participating in the regulatory sandbox to supplement the dossier component for processing of the administrative procedure.”.

3. To amend and supplement Clause 7 as follows:

“7. copies of enterprise registration certificates, establishment licenses, or establishment and operation licenses.

The State Bank shall proactively retrieve and use available information from the National Business Registration Database, or specialized databases in substitution for dossier documents comprising the enterprise registration certificate, establishment license, establishment and operation license of the organization applying for participation in the regulatory sandbox. If the information cannot be retrieved or the retrieved information is incomplete or inaccurate, the State Bank shall request the organization applying for participation in the regulatory sandbox to supplement the dossier component for processing of the administrative procedure.”.

Article 7. To amend and supplement a number of clauses of Article 13

1. To amend and supplement Clause 1 as follows:

“1. In case of sending dossiers via public postal service as prescribed by the Prime Minister, through services hired from enterprises or individuals, through authorized in accordance with law, or by hand-delivery to the State Bank’s Single-Window Division, an organization applying for participation in the regulatory sandbox shall send one dossier sets and one USB of application for a certificate of participation in the regulatory sandbox under Article 12 of this Decree.”.

2. To amend and supplement Clause 3 as follows:

“3. Within 90 days after sending a letter of confirmation of the receipt of a complete and valid dossier, the State Bank shall coordinate with related ministries in appraising the dossier, covering also an on-spot examination if necessary.

After receiving a complete and valid dossier, the State Bank shall send a consultation request to related ministries. Within 20 days after receiving the State Bank’s consultation request, the consulted ministries shall send their written opinions to the State Bank.

In case an on-spot examination is required, the State Bank shall send a written request to related ministries for assigning their officials to join the on-spot examination team. Within 7 days after receiving the State Bank’s request, the related ministries shall send to the State Bank documents on assignment of officials to join the on-spot examination team. The on-spot examination shall be notified to the applying organization at least 5 days before the examination is carried out at the working office of such organization.

In case the dossier needs to be explained or clarified, the State Bank shall request in writing the applying organization to give explanations and complete the dossier. The applying organization may send explanations and supplemented dossier only once. The dossier of explanations and supplementations shall clearly state the contents revised or supplemented compared with the dossier initially submitted; clarify the matters as requested by the State Bank; and be accompanied by supporting and comparative documents (if any). The organization shall be responsible for the completeness and accuracy of the supplemented dossier and documents.

45 days after the State Bank sends the request for explanation and dossier completion, if the applying organization still fails to send explanations and supplemented dossier, the State Bank shall issue a notice of return of the dossier to the applying organization. The time for explanation and dossier completion will not be included in the dossier appraisal period.

After receiving a completely supplemented dossier of the applying organization, the State Bank shall send a consultation request to related ministries. Within 15 days after receiving the State Bank’s consultation request, the consulted ministries shall send their written opinions to the State Bank.”.

Article 8. To amend and supplement Clause 2 Article 17

“2. The organization participating in the regulatory sandbox shall send an application for adjustment of the tested solution, made according to Form No. 05 provided in Appendix I to this Decree, and a Scheme describing the adjusted solution.

Within 25 working days after receiving the application for adjustment of the tested solution, the State Bank shall assess the testing process.

Where necessary, the State Bank shall issue a written request to consult relevant ministries for their comments. Within 7 working days after receiving the request, the consulted ministries shall send their written opinions to the State Bank.

In case the dossier of application needs to be explained or clarified, the State Bank shall send a written request for the organization to give explanations or complete the dossier. The organization may submit explanation and complete the dossier once only. The dossier of explanations and supplementations shall clearly state the contents revised or supplemented compared with the dossier initially submitted; clarify the matters as requested by the State Bank; and be accompanied by supporting and comparative documents (if any). The organization shall be responsible for the completeness and accuracy of the supplemented dossier and documents.

After 7 working days from the date the State Bank issues the written request for explanation and dossier completion, if the organization fails to resubmit the explanation and completed dossier, the State Bank shall issue a written notice of return of the dossier to such organization. The time for explanation and completion of the dossier shall not be included in the dossier-processing period.

Based on the Scheme describing the adjusted sandbox solution, the actual supervision situation, and the comments and opinions of relevant ministries (if any), the State Bank shall decide on whether to approve the adjustment of the sandbox solution or to reject it in writing, clearly stating the reasons.”.

Article 9. To amend and supplement Point b Clause 2 Article 19

“b) For cases specified at Point d Clause 1 of this Article:

The organization participating in the regulatory sandbox shall send to the State Bank a written request for testing termination, made according to Form No. 07 provided in Appendix I to this Decree; a report on assessment of testing results, made according to a set form provided in Appendix V to this Decree; and a testing termination plan.

Within 25 working days from the receipt of the application dossier for testing termination, the State Bank shall review and assess the entire testing process.

Where necessary, the State Bank shall issue a written request to consult relevant ministries for their comments. Within 7 working days after receiving the request, the consulted ministries shall send their written opinions to the State Bank.

In case the dossier of application needs to be explained or clarified, the State Bank shall send a written request for the organization to give explanations or complete the dossier. The organization may submit explanation and complete the dossier once only. The dossier of explanations and supplementations shall clearly state the contents revised or supplemented compared with the dossier initially submitted; clarify the matters as requested by the State Bank; and be accompanied by supporting and comparative documents (if any). The organization shall be responsible for the completeness and accuracy of the supplemented dossier and documents.

After 7 working days from the date the State Bank issues the written request for explanation and dossier completion, if the organization fails to resubmit the explanation and completed dossier, the State Bank shall decide to terminate the testing and revoke the certificate of participation in the regulatory sandbox. The time for explanation and completion of the dossier shall not be included in the dossier-processing period.

In case the organization submits a written explanation and completes the dossier, based on the testing supervision and monitoring and feedback (if any) from related ministries, the State Bank shall decide to terminate the testing and revoke the certificate of participation in the regulatory sandbox.”.

Article 10. To amend and supplement Clause 2 Article 20

“2. Procedures

The organization participating in the regulatory sandbox shall send to the State Bank a written request for extension of the testing period, made according to Form No. 09 provided in Appendix I to this Decree; and a report on testing results, made according to a set form provided in Appendix V to this Decree.

Within 25 working days after receiving a dossier of request for extension of the testing period, the State Bank shall assess the entire testing process.

Where necessary, the State Bank shall issue a written request to consult relevant ministries for their comments. Within 7 working days after receiving the request, the consulted ministries shall send their written opinions to the State Bank.

In case the dossier needs to be explained or clarified, the State Bank shall send a written request for the organization to give explanations or complete the dossier. The organization may submit explanation and complete the dossier once only. The dossier of explanations and supplementations shall clearly state the contents revised or supplemented compared with the dossier initially submitted; clarify the matters as requested by the State Bank; and be accompanied by supporting and comparative documents (if any). The organization shall be responsible for the completeness and accuracy of the supplemented dossier and documents.

After 7 working days from the date the State Bank issues the written request for explanation and dossier completion, if the organization fails to resubmit the explanation and completed dossier, the State Bank shall issue a written notice of return of the dossier to such organization. The time for explanation and completion of the dossier shall not be included in the dossier-processing period.

Based on the report on testing results (including the usefulness of the solution), practical supervision and feedback (if any) from related ministries, the State Bank shall decide to extend the testing period or issue a written refusal, clearly stating the reason.”.

Article 11. To amend and supplement Clause 2 Article 21

“2. Procedures

An organization participating in the regulatory sandbox shall send an application for certificate of testing completion, made according to Form No. 11 provided in Appendix I to this Decree, and a report on assessment of testing results, made according to a set form provided in Appendix V to this Decree, to the State Bank.

Within 25 working days from the receipt of the application dossier, the State Bank shall assess the entire testing process. Where necessary, the State Bank shall issue a written request to consult relevant ministries for their comments. Within 7 working days after receiving the request, the consulted ministries shall send their written opinions to the State Bank.

Based on the report on testing results (including the usefulness of the solution), practical supervision and the feedback (if any) from related ministries, the State Bank shall grant a certificate of testing completion to the organization participating in the regulatory sandbox or issue a written refusal, clearly stating the reason.”.

Article 12. To replace or remove a number of phrases; and replace Appendices

1. To replace the phrase “cyber information security, and information system security by level” with the phrase “cybersecurity and information system security by level” at Point a Clause 3 Article 24.

2. To remove the phrase “cyber information security risks” in Appendix II to Decree No. 94/2025/ND-CP.

3. To replace the phrase “explanation of technical matters” with the phrase “explanation of the technical solution for the information system used for the peer-to-peer lending solution, demonstrating satisfaction of the requirements for assurance of information system security by level”; and the phrase “process and unit responsible for prevention and combat of money laundering and terrorist financing in accordance with law” with the phrase “formulation of internal regulations on anti-money laundering and counter-terrorist financing in accordance with the law on anti-money laundering and counter-terrorist financing” in Appendix III to Decree No. 94/2025/ND-CP.

4. To replace Appendix I to Decree No. 94/2025/ND-CP with Appendix I to this Decree.

5. To replace the phrase “signature, full name and seal” in Appendices IV, V and VI to Decree No. 94/2025/ND-CP with the phrase “signature, full name and seal; or digital signature or electronic signature as prescribed by the law on e-transactions”.

Article 13. Effect

1. This Decree takes effect from October 06, 2026.

2. Articles VI, VII, VIII, IX, X and XI, Subsection D, Section 1, Appendix 1.7 to Resolution No. 24/2026/NQ-CP dated April 29, 2026, providing for the reduction, decentralization and simplification of administrative procedures and business conditions in the fields of national defense, home affairs, finance, construction, foreign affairs, justice and banking, cease to be effective from the effective date of this Decree.

3. Ministers, heads of ministerial-level agencies, chairpersons of People’s Committees of provinces and centrally-run cities, and related organizations and individuals shall implement this Decree.

Article 14. Transitional provisions

1. For dossiers of registration for participation in the regulatory sandbox for which the State Bank has issued a letter of confirmation of the receipt of the complete and valid dossier before the effective date of this Decree, the deadline for dossier appraisal and handling procedure shall continue to comply with the law in force at the time the State Bank issued such letter of confirmation.

2. The appraisal of conditions applicable to the legal representative and Chief Executive Officer of an organization applying for participation in the regulatory sandbox for which the State Bank has issued a letter of confirmation of receipt of a complete and valid dossier before the effective date of this Decree shall comply with this Decree.

3. For dossiers of registration for participation in the regulatory sandbox that have been received by the State Bank without a letter of confirmation of receipt of a complete and valid dossier before the effective date, the review of their completeness and validity shall comply with regulations on dossier components for registration for participation in the regulatory sandbox as reduced and simplified under this Decree.