AI for Banking & Financial Services Teams in Vietnam

The PDPL imposes penalties up to 5% of preceding-year revenue for cross-border transfer violations and up to 10x revenue from illegal data transactions, with a floor of VND 3 billion (approximately USD 120,000). For financial institutions handling large volumes of customer data, the revenue-based calculation can result in significant exposure.

The Cybersecurity Law requires 24-month local storage of Vietnamese user data. For banks using international core banking platforms, cloud-based analytics, or cross-border payment systems, this means implementing local data residency solutions or working with compliant local hosting providers. We design architectures that meet localisation requirements while maintaining AI functionality.

Vietnam's AI Law, effective March 2026, introduces a risk-based classification system (high, medium, low risk). High-risk AI systems require mandatory pre-market conformity assessments and human oversight. We help you assess which classification applies to your use case and prepare the necessary governance documentation before enforcement begins.

Vietnam's Personal Data Protection Law (effective January 2026) requires explicit prior consent for data processing, 72-hour breach notification to the Ministry of Public Security, and impact assessments for cross-border data transfers. The Cybersecurity Law also requires 24-month local data storage for Vietnamese user data. Our implementation includes compliance checkpoints for all these requirements.

Yes. Given that only 15-20% of Vietnam's workforce has business-level English, we deliver all training with Vietnamese-language materials and bilingual facilitators. Hands-on exercises use Vietnamese-language examples and locally relevant case studies.

Yes. We tailor content to cover both conventional and Islamic finance contexts. For Islamic banking teams, we include examples around Shariah-compliant product design, Islamic finance regulatory requirements, and AI applications specific to takaful and sukuk processes. Our facilitators have experience with both conventional and Islamic financial institutions across Malaysia, Indonesia, and the broader ASEAN region.

All hands-on exercises use synthetic, anonymised data sets that mirror real financial services data patterns without exposing any actual customer information. We can also work within your secure environment if needed. For organisations with strict data governance, we offer an on-premise delivery option where all tools and data remain within your network.

We cover the AI and technology risk guidelines from MAS (Singapore), OJK (Indonesia), BNM (Malaysia), BSP (Philippines), BOT (Thailand), SFC and HKMA (Hong Kong), and SBV (Vietnam). Content is localised to the regulatory environment most relevant to your institution. We also cover cross-border considerations for regional financial groups.

Absolutely. Module 1 (Foundations) is designed for all participants, but modules 2-5 can be attended selectively. For example, your risk team might focus on Credit Risk and Fraud Detection modules, while compliance teams attend the Regulatory Compliance module, and customer-facing teams attend the CX module. Module 6 (Roadmap) brings everyone together. We'll help you design the right attendance plan during the customisation phase.

For maximum hands-on learning, we recommend 12-25 participants per cohort. For larger teams, we run multiple cohorts. The programme works best when participants come from different departments (risk, compliance, operations, customer-facing) so cross-functional conversations happen naturally.