Criminal Investigation Legal Counsel: Vietnam Guide

Criminal investigation legal counsel should be involved as soon as a person or company receives a summons, request, inspection notice, search, allegation or indication that authorities are collecting evidence. Early advice helps confirm procedural status, preserve records, prepare truthful participation and stop continuing risk. It must never be used to hide evidence, obstruct officials or coordinate a false account.

This guide reflects Vietnam’s Penal Code No. 100/2015/QH13 as amended, including Law No. 86/2025/QH15 effective from 1 July 2025, and Criminal Procedure Code No. 101/2015/QH13 as amended, including Law No. 99/2025/QH15 effective from 1 July 2025. Rights and duties depend on the person’s formal status and current procedure.

A sound investigation response begins with lawful preservation and an exact understanding of status. Counsel should protect rights, identify conflicts and prepare accurate participation while ensuring that every production, statement and remediation decision is traceable to verified facts rather than fear, assumption or an improvised corporate narrative.

Jurion & Partners criminal defence principle

Criminal investigation legal counsel: confirm the immediate facts

Record the authority, official, document, date, subject, requested action and deadline. Preserve the original notice and how it was received. Determine whether the request concerns an individual, company, transaction, location, device or record set. This verification gives criminal investigation legal counsel a reliable basis for triage and prevents an informal message from being mistaken for the complete procedural direction.

Identify immediate safety, liberty, asset, evidence and operational risks. Establish a response leader and authorized communication route. Internal messages should avoid speculation or accusation and should reach only people who need to act.

Initial criminal investigation response

Issue	Evidence	Decision
Status	Summons, notice and procedural document	Which rights and duties apply?
Representation	Roles and potential conflicts	Who is the client?
Evidence	Systems, records and custodians	What must be preserved?
Participation	Interview or production request	How should the response be prepared?
Continuing risk	Payments, access and operations	What lawful controls are needed?

Establish an accurate event log

The response log should capture every authority contact, attendance request, search, collection, submission and deadline. Record who received or provided information and retain proof. A single controlled log prevents different teams from acting on inconsistent understandings.

Identify the client and conflicts

Counsel may advise the company, legal representative, employee, victim or another individual. Those interests can diverge even when everyone wants the matter resolved. The engagement should identify the client, authorized instructors, permitted recipients and scope.

Criminal investigation legal counsel should reassess conflicts as facts and statuses change. An employee interviewed as a witness may later face personal exposure. Joint representation should not continue where independent interests cannot be protected.

Control information sharing

Advice should be shared only with authorized recipients who need it. Parent companies, auditors, insurers and lenders may require information, but disclosure can affect confidentiality, personal data and strategy. Use an approved reporting protocol with verified facts and legal caveats.

Confirm procedural status

Criminal investigation legal counsel should obtain and read the current procedural document before advising on attendance, disclosure or representation. The issuing authority, date, legal basis, stated capacity and review route provide the reliable starting point for identifying the rights and duties that apply.

Vietnamese criminal procedure distinguishes statuses with different rights and obligations. Counsel should verify status from current official documents and law rather than infer it from the authority’s tone or an informal description.

The person should understand attendance, representation, statements, complaints, document and other applicable rights and duties. An official request should not be ignored, but ambiguities about time, place, subject or required material may need prompt lawful clarification.

Prepare status-specific advice

A witness, denounced person, victim, detained person, accused or defendant does not participate in exactly the same capacity. The preparation note should state the verified status, legal basis, practical expectations and issues requiring immediate escalation.

Understand the suspected conduct

The investigation may concern property, fraud, tax, corruption, accounting, bidding, securities, customs, environment, data, violence or another offence. Each provision has its own elements, mental state and possible defences. A contract breach or administrative violation is not automatically criminal.

Criminal investigation legal counsel should create an elements matrix with known supporting, contrary and missing facts. The purpose is not to declare an outcome before evidence is reviewed, but to direct lawful preservation and preparation to the actual issues.

Preserve records proportionately

Issue a targeted hold for relevant email, messaging, documents, accounting, payments, contracts, access logs, devices, video and physical records. Identify custodians and systems. Preserve native files and metadata; a screenshot may omit context. The hold should state its scope, responsible recipients and escalation route, while avoiding unnecessary collection of unrelated personal or commercially sensitive material.

Collection should comply with applicable privacy, employment, secrecy and cybersecurity rules. Restrict access and record source, collector, time and transfer. Technical specialists should work from a legal scope and preserve integrity.

Build a source-linked chronology

Every material event should link to a document, system record or identified witness. Separate contemporaneous evidence from later recollection and legal inference. Mark adverse and missing evidence rather than designing a chronology only to support the preferred account.

Prepare for an interview or statement

Preparation begins by confirming the participant's formal status, the requesting authority, the stated subject, the scheduled time, the working language and the available representation arrangements. Counsel should then compare personal recollection with contemporaneous records and explain how to address uncertainty truthfully.

Confirm status, authority, subject, time, language and applicable participation rights. Review the person’s own relevant records. The person should answer truthfully from knowledge, request clarification where needed and avoid guessing.

Criminal investigation legal counsel preparation can explain procedure and organize facts but must not script false evidence. Translation should be accurate. The participant should review the written record through the lawful process and identify inaccuracies promptly.

Separate memory from documents

A witness may remember an event differently from an email or system log. Preparation should explore the difference without pressuring the person to adopt either version. The statement can explain the source and limits of recollection honestly.

Respond to document and data requests

Verify authority, scope, deadline, form and method. Search the identified systems systematically and keep a production index. Where law permits, retain a copy of submitted material and proof of receipt. The index should connect each produced item to its source, custodian, collection date and submission batch, enabling later questions to be answered without rebuilding the record.

Confidential, personal, privileged or unrelated material requires legal review under the applicable framework. Objections or clarification should use the correct procedure. Do not bury responsive evidence in uncontrolled bulk data or produce altered working copies as originals.

Prepare for a search or seizure

Employees should know whom to call and should not obstruct officials. Verify official identities and documents, preserve safety and observe the scope where lawfully permitted. Record locations, devices and materials involved. A reception and information-technology protocol should identify response contacts without encouraging argument, concealment, remote deletion or interference with lawful authority activity.

Business continuity must not interfere with evidence. Replacement systems or access controls may be needed, but changes should be authorized and logged. Counsel should secure the relevant procedural records and identify follow-up deadlines.

Assess coercive and restrictive measures

Detention, travel restrictions, asset measures or other procedural actions require urgent advice on legal basis, duration, review and available remedies. Official documents should be checked. Counsel should not promise release or a particular outcome. Family, medical, employment and governance consequences should be documented separately so urgent practical needs do not obscure the legal test governing the measure.

Family and company communication should protect dignity and accuracy. Operational replacement of authority or access may be necessary, but it should not be retaliatory, destroy records or imply guilt.

Trace financial and digital evidence

Financial matters may require ledgers, bank statements, invoices, tax records, beneficial ownership, approvals and payment trails. A forensic accountant can reconcile flows from a defined question but cannot decide the legal offence. Reconciliation should identify assumptions, currency treatment, missing periods, related parties and unexplained differences, allowing criminal investigation legal counsel to distinguish proven movements from inference.

Digital analysis should preserve native data, system context, collection method and integrity controls. A single message or image may mislead without the complete thread, users, timing and platform information.

Conduct an internal review carefully

The review should have defined scope, authority, preservation, interviews, confidentiality and reporting. It should avoid duplicating authority questioning without strategy or contaminating witness recollection. Findings must distinguish fact, inference and legal assessment. Governance should specify who may expand the mandate, receive interim risks and approve remediation, ensuring the review remains controlled as new facts emerge.

Criminal investigation legal counsel should decide sequencing around official requests and individual representation. The company may need immediate control improvements, but remediation should not be designed to recreate historical evidence.

Coordinate parallel proceedings

The same facts may engage criminal, administrative, tax, civil, employment, licensing and regulatory processes. Statements or settlements in one forum can affect another. Map authorities, deadlines, evidence overlap and disclosure. A coordinated position register should flag inconsistencies before submission while preserving the distinct legal test, procedure and decision-maker applicable to each forum.

A commercial agreement cannot guarantee how a criminal authority exercises public power. Restitution, correction or victim engagement may be relevant but requires careful advice on recipient, characterization, timing and evidence.

Use experts for defined questions

Accounting, valuation, digital forensics, medical, engineering or industry specialists may clarify disputed facts. Instructions should define question, period, assumptions, sources and method. Experts should preserve workpapers and disclose limitations. Their deliverable should answer the commissioned technical issue neutrally, identify unavailable inputs and separate measured results from professional judgment.

Credentials do not cure incomplete data. Counsel should test competing explanations and ensure that the expert remains within expertise. Technical results should be connected to the legal elements without allowing the expert to decide guilt.

Manage communications and reputation

Internal communication should support legal accuracy and employee welfare without publishing unverified allegations. External statements can affect evidence, privacy and reputation. Designate a spokesperson and approval route. The approved holding statement should be reviewed after each material development and never reveal protected evidence, identify vulnerable individuals unnecessarily or predict an authority's conclusion.

Regulatory, market, insurer or contractual notices may have independent duties. Each statement should use verified facts and remain consistent. “No comment” is not the only possible response, but improvisation is dangerous.

Review remediation and continuing operations

Where continuing harm is possible, the company may suspend a transaction, restrict access, change approval or preserve assets. The response should be proportionate, authorized and documented. Unrelated lawful operations need not stop automatically. Each interim control should identify the risk addressed, decision-maker, affected process, review date and restoration criteria so an emergency measure does not become an unexplained permanent restriction.

Control changes should have an owner and review date. They can reduce risk without conceding an offence. Any voluntary correction or disclosure should follow current legal analysis after the scope is understood.

• Verify status and every official document.
• Identify client and conflicts before sharing advice.
• Preserve native records and relevant metadata.
• Maintain a source-linked chronology and response log.
• Prepare truthful participation without scripting evidence.
• Coordinate parallel legal and regulatory processes.
• Document remediation and continuing-operation decisions.

Official legal references

Core sources include the Penal Code No. 100/2015/QH13 as amended by Law No. 12/2017/QH14 and Law No. 86/2025/QH15 effective 1 July 2025; and Criminal Procedure Code No. 101/2015/QH13 as amended, including Law No. 99/2025/QH15 effective 1 July 2025. Criminal Mutual Legal Assistance Law No. 103/2025/QH15 is effective from 1 July 2026 where cross-border evidence is relevant.

How Jurion & Partners can assist

Jurion & Partners’ Criminal Law legal services can verify status, prepare participation, preserve evidence, manage productions, conduct internal reviews, coordinate experts or foreign counsel, and provide defence representation within an agreed mandate. Related guidance appears in Legal Insights.

For urgent assistance, Book a Consultation or Contact Jurion & Partners. Criminal investigation legal counsel is most effective before records, statements or operational responses create avoidable additional risk.

Conclusion

Criminal investigation legal counsel should protect rights while supporting a lawful, accurate response. Early conflict analysis, preservation, source-linked chronology, truthful participation and coordinated remediation allow a company or individual to make defensible decisions without obstructing investigators or overstating what the available evidence establishes.