EveryAILaw.comDoes Law on Artificial Intelligence require Conformity Assessment?
Vietnam • enforcing
Yes — 1 provision
Requirements at a glance
This regulation imposes 7 specific requirements for Conformity Assessment across 1 provision:
- Risk classification — Art. 9 classifies systems as high, medium or low risk using harm, use-sector, user-scope and impact-scale criteria; the Government supplies detail
- Provider classification and notice — Under Art. 10, providers self-classify before use, keep a classification dossier for medium- and high-risk systems and notify the Ministry of Science and Technology of those results before use
- Deployer responsibility — Deployers may inherit the provider's classification, must preserve system safety and integrity in use and must coordinate reclassification after modifications, integration or functional changes create new or higher risk
- High-risk lists — Under Art. 13(4), the Prime Minister specifies both the high-risk list and the subset requiring conformity certification before use
- Conformity assessment — Art. 13 requires assessment before first use and after significant change. A registered or recognised assessment body must assess only systems in the certification subset; providers may self-assess other high-risk systems or hire such a body
- Transition — Under Art. 35, pre-effective systems have 18 months in health, education and finance and 12 months otherwise to comply. They may continue operating during the period unless the regulator identifies a risk of serious harm and orders suspension or termination
- Translation — These English descriptions are working translations of visually reviewed Vietnamese excerpts, not official English wording
Risk-Based AI Classification
Requirements
| Requirement | Details |
|---|---|
| Risk classification | Art. 9 classifies systems as high, medium or low risk using harm, use-sector, user-scope and impact-scale criteria; the Government supplies detail |
| Provider classification and notice | Under Art. 10, providers self-classify before use, keep a classification dossier for medium- and high-risk systems and notify the Ministry of Science and Technology of those results before use |
| Deployer responsibility | Deployers may inherit the provider's classification, must preserve system safety and integrity in use and must coordinate reclassification after modifications, integration or functional changes create new or higher risk |
| High-risk lists | Under Art. 13(4), the Prime Minister specifies both the high-risk list and the subset requiring conformity certification before use |
| Conformity assessment | Art. 13 requires assessment before first use and after significant change. A registered or recognised assessment body must assess only systems in the certification subset; providers may self-assess other high-risk systems or hire such a body |
| Transition | Under Art. 35, pre-effective systems have 18 months in health, education and finance and 12 months otherwise to comply. They may continue operating during the period unless the regulator identifies a risk of serious harm and orders suspension or termination |
| Translation | These English descriptions are working translations of visually reviewed Vietnamese excerpts, not official English wording |
Penalties
| Violation | Fine |
|---|---|
| Violation | Art. 29 applies administrative or criminal liability according to the nature, severity and consequences of the violation, plus civil compensation where damage occurs. Art. 29(5) delegates detailed administrative penalties to the Government; the Act states no fixed fine here |