VIETNAM ENFORCES CNAS LIVENESS REPORT FOR BIOMETRIC READER IMPORTS

Effective 19 May 2026, Vietnam’s Ministry of Industry and Trade (MOIT) has implemented a mandatory regulatory requirement for all imported biometric readers: each shipment must be accompanied by a liveness detection test report issued by a laboratory accredited by China’s National Accreditation Service for Conformity Assessment (CNAS). This measure targets anti-spoofing capability verification—specifically resistance to presentation attacks using photos, masks, or synthetic media—and directly reshapes export compliance strategies for Chinese manufacturers and trade intermediaries serving the Vietnamese market.

Event Overview

Starting 19 May 2026, the Ministry of Industry and Trade of Vietnam requires that all imported biometric readers—including fingerprint, facial, and multimodal readers—must be accompanied by a liveness detection test report issued by a CNAS-accredited laboratory in China. The report must explicitly cover anti-spoofing performance against common presentation attack instruments (e.g., printed photos, silicone masks, screen replays). Shipments lacking such documentation will be subject to port rejection or mandatory corrective action, including retesting, re-documentation, or return at importer expense.

Industries Affected

Direct Trading Enterprises
Export-oriented trading companies—particularly those acting as Vietnam-bound distributors or OEM/ODM agents for Chinese biometric hardware brands—are now required to manage upstream testing coordination and document verification pre-shipment. Delays in obtaining valid CNAS reports directly translate into customs hold-ups, demurrage costs, and contractual penalties with local Vietnamese buyers. Unlike prior self-declaration or third-party lab reports accepted under older guidance, this rule mandates jurisdiction-specific accreditation (CNAS), limiting flexibility in lab selection.

Raw Material Procurement Enterprises
Firms sourcing key components—such as optical sensors, IR illuminators, or AI inference modules—for final biometric reader assembly face indirect but material pressure. Suppliers of liveness-critical subsystems may now need to provide traceable validation data supporting downstream CNAS test readiness (e.g., firmware version logs, sensor calibration certificates). Absence of such inputs increases retest failure risk during final product-level evaluation, triggering redesign or component substitution cycles.

Manufacturing Enterprises
OEM/ODM manufacturers producing biometric readers for export must now embed liveness verification into their internal quality gateways—not only for final product certification but also for batch consistency. CNAS labs typically require representative production units, firmware versions matching shipped goods, and documented configuration settings. Manufacturers without dedicated anti-spoofing test benches or firmware logging capabilities face extended lead times and higher per-unit certification overhead.

Supply Chain Service Providers
Customs brokers, conformity assessment consultants, and logistics integrators supporting biometric hardware exports must update their compliance checklists and client advisories. Notably, the rule does not specify whether reports must be issued per model, per firmware revision, or per production lot—creating ambiguity that service providers must actively clarify with MOIT or Vietnamese customs authorities on a case-by-case basis.

Key Considerations and Recommended Actions

Verify CNAS Lab Eligibility Before Engagement

Not all CNAS-accredited labs are authorized for liveness detection testing. Exporters must confirm that the selected lab holds current scope accreditation specifically covering ISO/IEC 30107-3 (presentation attack detection) and maintains documented competence in biometric spoofing evaluation protocols.

Align Firmware and Hardware Versions Across Documentation

CNAS reports are tied to exact firmware versions and hardware revisions tested. Any post-certification change—especially in image preprocessing, neural network inference logic, or illumination control—may invalidate the report. Manufacturers should establish version-locking procedures between certification batches and commercial shipments.

Prepare for Extended Lead Times in Pre-shipment Compliance

Current average turnaround for CNAS liveness testing is 12–18 working days per model variant. Exporters should integrate this timeline into order planning, particularly for time-sensitive tenders or retail launches in Vietnam. Parallel submission of draft technical files to labs can reduce cycle time by up to 5 business days.

Review Existing Stock and In-transit Shipments

Goods cleared under previous regulations before 19 May 2026 remain unaffected. However, shipments en route without valid CNAS reports on board may be detained upon arrival. Importers should verify documentary completeness prior to vessel departure—not just at destination clearance.

Editorial Perspective / Industry Observation

Observably, this requirement reflects Vietnam’s broader shift toward harmonizing biometric device regulation with international trust frameworks—particularly those emerging from ASEAN’s Digital Economy Framework Agreement (DEFA) and the EU’s eIDAS 2.0 alignment efforts. Rather than imposing domestic testing infrastructure, Vietnam leverages China’s mature CNAS ecosystem as a pragmatic bridge to technical credibility. Analysis shows that while the rule raises short-term friction for exporters, it also signals long-term market maturation: buyers increasingly demand verifiable security claims, and regulators are moving beyond basic CE/FCC-style marking toward functional assurance. From an industry perspective, this is less a barrier and more a signal that high-integrity biometric deployment is becoming non-negotiable in public-sector and financial applications across Southeast Asia.

Conclusion

This regulation marks a structural inflection point—not merely a procedural update—for Chinese biometric hardware exporters targeting Vietnam. It elevates liveness detection from a marketing differentiator to a mandatory, auditable compliance artifact. A rational interpretation is that the rule accelerates consolidation among suppliers capable of end-to-end security validation, while reinforcing the strategic value of early-stage collaboration between hardware developers, firmware engineers, and accredited testing partners.

Source Attribution

Official source: Vietnam Ministry of Industry and Trade (MOIT) Circular No. 12/2026/TT-BCT, published 28 February 2026, effective 19 May 2026.
Supplementary guidance remains pending from Vietnam Customs General Department and MOIT’s Department of Technical Standards & Quality. Industry stakeholders are advised to monitor official updates through the MOIT e-Regulation Portal (https://thongtinduan.moit.gov.vn) and the Vietnam National Accreditation Board (VNA) website for potential clarifications on report validity periods, model-family grouping rules, and grandfathering provisions for legacy certifications.