BPO Contracts in Vietnam: 2026 Guide to Key Agreements

Written by Ascentium Content Team | 31 August 2026

A Business Process Outsourcing (BPO) arrangement without a well-structured contract is one of the most common sources of operational and legal risk for businesses in Vietnam. Without clear documentation of scope, performance standards, data obligations, and remedies, disputes are inevitable — and in 2026, the stakes are higher than ever.

The most significant change: Vietnam's new Personal Data Protection Law (PDPL, Law 91/2025/QH15) and Decree 356/2025/ND-CP took effect on 01 January 2026, replacing Decree 13/2023. Every BPO contract that involves personal data — payroll, HR, accounting, customer service — must now comply with a fundamentally updated data protection framework featuring significantly higher penalties.

What Is a BPO Contract and What Business Functions Can Be Outsourced?

A BPO contract is a legal agreement between a client company and a third-party service provider that authorizes the provider to manage specific non-core business functions on the client's behalf. The provider acts as an agent of the client company in the operational chain, with payments typically contingent on meeting agreed performance standards.

Common functions outsourced in Vietnam include:

Payroll processing and Personal Income Tax (PIT) compliance
Bookkeeping and accounting (monthly, quarterly, annual)
Human resources administration and recruitment support
IT support and software development
Customer service and call centre operations
Data entry, document management, and back-office processing
Sales support, appointment setting, and marketing operations

What Are the Four Main Types of BPO Contracts?

BPO contracts fall into four main categories, each suited to different project characteristics and risk appetites:

Contract type	Payment mechanism	Key advantage	Best for
Time & Materials (T&M)	Billing based on actual time spent and materials used at pre-agreed hourly rates.	Flexible; ideal when project scope may evolve; transparent cost tracking.	Software development, IT support, ongoing consulting.
Fixed Price	Set price for the entire project agreed upfront by both parties.	Predictable cost; defined scope and timeline; easier to budget.	Marketing campaigns, standardized back-office services.
Flexible Scope (DSDM)	Agile framework — scope adapts while timeline and quality remain fixed.	Strong collaboration; adaptive planning; continuous delivery of value.	Complex implementations, software products.
Pain Share / Gain Share	Payments tied to predefined performance metrics — both parties share upside and downside.	Aligns incentives; encourages partnership mindset; performance-driven compensation.	Customer service operations, sales outsourcing.

Strategic Note: For payroll and HR BPO, a Fixed Price contract with clearly defined monthly deliverables is the most common structure, providing cost certainty and measurable SLAs.

Why Is a BPO Contract Important?

A well-drafted BPO contract serves three core functions:

Defines scope and expectations precisely: Preventing "scope creep" and ambiguity about what is and is not included in the service.
Creates legal protection: Documenting responsibilities, remedies, IP ownership, and exit rights that courts or arbitrators can enforce.
Ensures regulatory compliance: Addressing data protection (PDPL 2026), tax treatment of outsourcing fees (Foreign Contractor Tax for offshore BPO), and statutory labour obligations.

What Are the Key Elements Every BPO Contract in Vietnam Must Include?

To protect your business in 2026, ensure your BPO contracts cover the following elements:

Contract element	What to include	2026 Update / Practical Note
Scope of services	Clear definitions of outsourced processes, expected deliverables, and explicit exclusions.	If covering HR/payroll, specify compliance obligations for 2026 changes (minimum wage, new PIT brackets, e-contracts).
Service Level Agreements (SLAs)	Measurable performance standards (response times, error rates) and escalation procedures.	Include specific SLAs for payroll processing dates and tax filing accuracy, as errors trigger direct financial penalties.
Pricing and payment terms	Pricing model, billing frequency, currency, and handling of scope changes.	For cross-border BPO, address Vietnam's Foreign Contractor Tax (FCT) implications for offshore providers.
Confidentiality & IP	Definitions of confidential information, protection methods, and IP ownership.	Must align with PDPL. Bank account details, ID documents, and transaction history are now classified as sensitive data.
Data protection & PDPL compliance	Specify data controller vs. processor roles, processing purposes, breach notification, and DPO appointment.	A formal Data Processing Agreement (DPA) is mandatory. Penalties for non-compliance can reach up to VND 3 billion.
Term, renewal & termination	Initial duration, renewal conditions, notice periods, and exit assistance obligations.	Include provisions for regulatory-triggered amendments to renegotiate terms if new laws affect service delivery.
Dispute resolution & governing law	Governing law and mechanism (negotiation, mediation, arbitration, or litigation).	The Vietnam International Arbitration Centre (VIAC) is commonly used and enforceable under the New York Convention.
Compliance & audit rights	Client’s right to audit the provider’s operational and regulatory compliance.	Under Decree 356, data controllers must ensure processors comply with PDPL. Audit rights should reflect this.

How Does the New PDPL Affect BPO Contracts in Vietnam?

The implementation of the PDPL (Law 91/2025/QH15) and Decree 356/2025/ND-CP on 01 January 2026 is a massive legal shift.

Data Processing Agreement (DPA): All BPO arrangements involving personal data must have a formal DPA. Without it, the contract is non-compliant, risking fines up to VND 3 billion.
Data Protection Officer (DPO): Both the client and the BPO provider must appoint a DPO or Data Protection Department, though exemptions apply for small enterprises (≤5 years old) under certain conditions.
Sensitive Data: Most payroll and HR contracts handle salary data, tax codes, and bank accounts—all now classified as sensitive data requiring enhanced protection measures.
Breach Notification: Contracts must outline who is responsible for notifying the Ministry of Public Security (A05 Department) and the internal timeline for reporting breaches between the provider and the client.

What Are the Risks of Non-Compliance?

Failing to maintain a compliant BPO contract exposes both the client and provider to:

Operational disputes: Ambiguity leads to disagreements over costs and remedies for missed SLAs.
Data protection penalties: Fines up to VND 3 billion for general violations, and up to 5% of annual revenue for cross-border transfer violations under the PDPL.
Tax penalties: Incorrect treatment of offshore BPO payments can trigger 20% underpayment fines and 0.03%/day late payment interest.
Reputational damage: Service failures or data breaches severely damage brand trust and employee satisfaction.

Secure the Right BPO Contract Framework

We help prepare and review BPO contracts, Data Processing Agreements (DPAs), and Service Level Agreements (SLAs) to ensure alignment with Vietnam's 2026 regulatory framework. With clear guidance and practical support, we help mitigate legal risks and optimize your outsourcing partnerships from start to finish.

How Can We Help:

Ascentium Vietnam provides comprehensive BPO services and contract advisory support for foreign businesses operating in Vietnam:

BPO Contract Review: Reviewing existing agreements for PDPL compliance, SLA adequacy, and alignment with 2026 regulations.
PDPL Compliance Advisory: Preparing Data Processing Agreements (DPAs), supporting DPO appointments, and guiding Cross-Border Data Transfer Impact Assessments (CDTIA).
Payroll & Accounting BPO: Delivering compliant monthly payroll, bookkeeping, tax finalizations, and financial reporting under Circular 99/2025.
HR Administration: Managing labor contracts, social insurance, and compliance monitoring.

Let Us Help You Secure Your BPO Partnerships

Frequently Asked Questions

View full post