Vietnam’s Standard Metrology and Quality Authority (STAMEQ) updated its Technical Guidelines for Importing Biometric Access Control Devices (QCVN 122:2026) on May 14, 2026, mandating that all imported biometric readers—including fingerprint, palm vein, and multimodal terminals—must be accompanied by anti-spoofing test reports issued by China National Accreditation Service (CNAS)-accredited laboratories. These reports must assess resistance to photo, mask, and 3D-printed spoof attacks per Annex B of GB/T 39786–2021. The regulation takes effect on August 1, 2026, with a transition period of just 85 days. Exporters and importers of biometric access devices—particularly those operating between China and Vietnam—should treat this as a high-priority compliance signal affecting product certification, customs clearance, and market access.

Event Overview

On May 14, 2026, Vietnam’s Standard Metrology and Quality Authority (STAMEQ) published QCVN 122:2026, an updated technical standard governing the import of biometric readers. The revision explicitly requires that all such devices entering Vietnam must be accompanied by anti-liveness attack test reports, specifically validating resistance to photo, mask, and 3D-printed spoofing attempts. These reports must be issued by laboratories accredited by China’s National Accreditation Service (CNAS), and must follow the methodology outlined in Annex B of the Chinese national standard GB/T 39786–2021. Enforcement begins on August 1, 2026; no extensions or exemptions have been announced publicly.

Which Subsectors Are Affected

Direct Exporters and Importers

Companies directly engaged in cross-border trade of biometric readers between China and Vietnam will face immediate documentation requirements at customs. Non-compliant shipments may be detained or rejected upon entry, causing delays, retesting costs, or loss of contractual delivery windows.

Manufacturers and OEMs

Manufacturers—especially those producing fingerprint, palm vein, or multimodal terminals for Vietnamese distribution—must now ensure their products undergo CNAS-recognized anti-liveness testing prior to shipment. This adds a new pre-export validation step, potentially impacting time-to-market and unit-level compliance cost allocation.

Supply Chain and Certification Service Providers

Third-party testing labs, certification consultants, and logistics intermediaries supporting biometric device exports will see increased demand for CNAS-aligned anti-spoofing assessments. Their ability to coordinate timely testing, report issuance, and document verification will become a critical service differentiator.

What Relevant Enterprises or Practitioners Should Focus On and How to Respond Now

Monitor official STAMEQ guidance and implementation notices

While QCVN 122:2026 is published, details on acceptable report formats, validity periods, language requirements, and customs submission procedures remain pending. Enterprises should track STAMEQ’s official portal and Vietnam Customs announcements for clarifications expected before August 2026.

Identify which product models and SKUs require immediate reassessment

Not all biometric readers are equally exposed: devices already certified under equivalent international standards (e.g., ISO/IEC 30107-3) may not automatically satisfy the CNAS-specific requirement. Companies should map current Vietnamese-bound SKUs against the scope defined in QCVN 122:2026 and prioritize those lacking existing CNAS-issued anti-liveness reports.

Distinguish between regulatory intent and operational readiness

The mandate signals Vietnam’s tightening focus on biometric security integrity—not merely interoperability or performance. However, actual enforcement consistency across ports and timelines for report acceptance (e.g., whether retrospective reports are accepted) remains unconfirmed. Treat initial implementation as a phased learning period rather than assuming full uniformity from Day 1.

Initiate lab coordination and documentation preparation now

CNAS-accredited labs may experience capacity constraints as demand rises. Exporters should contact qualified labs immediately to secure testing slots, confirm report content alignment with Annex B of GB/T 39786–2021, and validate bilingual (Vietnamese/English) reporting options if required for customs filing.

Editorial Perspective / Industry Observation

Observably, this update reflects Vietnam’s broader move toward harmonizing biometric device regulation with internationally recognized anti-spoofing benchmarks—while anchoring conformity assessment to a specific national accreditation system (CNAS). Analysis shows it is less a standalone technical shift and more a procedural tightening: the underlying security expectation (anti-liveness) is not new, but the mandated source and methodology of verification are. From an industry perspective, this is best understood as a compliance signal—not yet a fully matured enforcement regime—indicating growing scrutiny of identity assurance in physical access systems. Continued attention is warranted, particularly as other ASEAN markets consider similar technical gateways for biometric imports.

This development underscores how national technical regulations increasingly function as de facto trade filters—not through tariffs, but through standardized, jurisdiction-specific conformity evidence. For exporters, the takeaway is not that biometric readers are being restricted, but that verifiable, accredited proof of liveness detection capability has become a non-negotiable entry condition in Vietnam’s access control market.

Information Sources

Main source: Vietnam Standard Metrology and Quality Authority (STAMEQ), QCVN 122:2026 – Technical Guidelines for Importing Biometric Access Control Devices, effective May 14, 2026. Note: Implementation details—including report format specifications, translation requirements, and port-level enforcement protocols—are still pending official clarification and remain under observation.