Vietnam’s Ministry of Industry and Trade (MOIT) issued Circular 18/2026/TT-BCT on May 30, 2026, introducing new compliance requirements for imported biometric readers—effective July 1, 2026. This regulation directly affects exporters, importers, and integrators serving Vietnam’s physical access control, identity verification, and border management sectors, as non-compliant devices will be blocked at customs clearance.

Event Overview

On May 30, 2026, Vietnam’s Ministry of Industry and Trade (MOIT) signed Circular 18/2026/TT-BCT. The circular mandates that, starting July 1, 2026, all imported biometric readers must: (1) bear a permanent label in Vietnamese on the device body indicating compliance status with FIPS 201-3 and/or ISO/IEC 30107-1 standards; and (2) have their liveness detection and feature-matching algorithms’ SHA-3 hash values submitted to the National Authority for Cybersecurity and Information Security (NACIB) for registration prior to import. Devices failing to meet both requirements will not clear Vietnamese customs.

Which Subsectors Are Affected

Direct Trading Enterprises
Importers and export-oriented distributors supplying biometric readers into Vietnam are directly subject to the labeling and algorithm registration obligations. Non-compliance halts customs release—making this a hard operational gate, not a post-import certification step.

Manufacturing & OEM Providers
Original equipment manufacturers—including those producing under private label or white-label arrangements—must now support Vietnamese-language labeling (physically affixed, not just in manuals) and provide verifiable algorithm hash data. This introduces new pre-shipment coordination requirements with downstream importers.

Systems Integrators & Solution Providers
Firms deploying biometric readers in government, banking, or critical infrastructure projects in Vietnam must verify that each device unit meets the new labeling and NACIB registration criteria before tender submission or delivery. Unregistered units may invalidate contract compliance or trigger procurement rejection.

Supply Chain & Logistics Service Providers
Cargo agents, customs brokers, and freight forwarders handling biometric reader shipments into Vietnam must now validate two additional checkpoints—physical label presence and NACIB registration confirmation—before filing import declarations. Absence of either triggers clearance delays.

What Relevant Enterprises or Practitioners Should Focus On—and How to Respond Now

Monitor official guidance from MOIT and NACIB on hash submission procedures

The circular confirms the requirement to submit SHA-3 hashes but does not yet specify technical format, submission portal, or validation timeline. Enterprises should track NACIB’s upcoming implementation notices—particularly regarding whether hash submission applies per model variant, firmware version, or individual unit batch.

Verify labeling capability across current and upcoming product lines

Physical Vietnamese-language labeling must be affixed to the device itself—not packaging or documentation. Manufacturers and importers should audit production lines and packaging workflows to ensure durable, compliant labeling can be applied without redesign or delay. This includes assessing label placement, language accuracy, and durability against environmental use cases.

Distinguish between regulatory signal and enforceable obligation

This is a binding import condition—not a voluntary best practice. As of July 1, 2026, customs authorities will treat missing labels or unregistered hashes as grounds for refusal. Enterprises should treat this as a hard compliance deadline, not a guideline subject to phased rollout or discretion.

Initiate cross-functional alignment ahead of Q3 2026

Prepare internal coordination between R&D (algorithm documentation), manufacturing (labeling execution), legal/compliance (certification mapping), and supply chain (customs documentation). Begin drafting Vietnamese label copy aligned with actual FIPS/ISO certification scope—avoid generic claims unsupported by test reports.

Editorial Perspective / Industry Observation

Observably, this regulation reflects Vietnam’s broader shift toward asserting sovereign oversight over foundational digital identity infrastructure—not just hardware safety, but algorithmic transparency and traceability. Analysis shows it is less about market access restriction and more about establishing an auditable baseline for biometric system integrity in public-sector deployments. From an industry perspective, it signals growing convergence between cybersecurity policy and physical access technology regulation in ASEAN markets. Current enforcement appears targeted at import gateways rather than domestic resale or end-use, meaning downstream resellers are not directly liable—but upstream accountability is now explicit and technical. The requirement to register algorithm hashes—rather than source code or full models—suggests a pragmatic balance between security assurance and commercial confidentiality.

Concluding, this regulation formalizes a new layer of technical due diligence for biometric reader trade with Vietnam. It is neither a temporary pilot nor a symbolic measure: it establishes a mandatory, verifiable, and enforceable import condition. Enterprises should interpret it as a structural update to Vietnam’s regulatory perimeter—not a one-off compliance hurdle.

Source: Vietnam Ministry of Industry and Trade (MOIT), Circular 18/2026/TT-BCT, effective July 1, 2026.
Note: NACIB’s technical submission guidelines and hash validation process remain pending publication and are under active observation.