Where we work · Laos
ISO and GRC certification consulting in Laos
Achieve ISO and GRC certification in Laos with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 21 standards, one team
- Accredited certification route
- Ho Chi Minh City office team
- Effivity and Academy included
Sectors that ask for certification in Laos
Clients include
ISO and GRC certification in Laos at a glance
The Lao People's Democratic Republic builds its quality and compliance picture from a handful of recent instruments. The Law on Electronic Data Protection of 2017 and the Law on Cyber Security of 2025 govern data and digital services, the Bank of the Lao PDR sets technology rules for banks and payment providers, and the Food and Drug Department of the Ministry of Health oversees food safety, including HACCP, and medical devices. The Department of Standardisation and Metrology accredits testing and calibration laboratories, while the Investment Promotion and Management Committee points to agriculture, minerals, hydropower electricity, tourism and expanding manufacturing in food processing, garments and construction materials. Certificates for management systems come from certification bodies, never from Sterling, and buyers decide which accreditation they accept. Laws are written in Lao, so audit language needs agreeing early. Sterling's Ho Chi Minh City office serves clients in Laos, drawing on 8,100+ client engagements in 60+ countries and 20+ years of experience, with Effivity and Sterling Academy included with the engagement.
ISO and GRC standards Sterling delivers in Laos
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Laos (10)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Law on Electronic Data Protection The Government manages electronic data protection centrally; Article 40 assigns this to the ministry responsible for posts, telecommunications and communications (the Law names it the Ministry of Post, Telecommunications and Communications; the Lao Official Gazette lists the Ministry of Technology and Communications as the responsible body), with that ministry's provincial and capital departments and its district, municipal and city offices. | Applies to individuals, legal entities and organisations, domestic and foreign, that live or operate in Laos (Article 6). Covers collection, keeping, use, disclosure, transfer, access, correction and deletion of electronic data. Data collection needs the data owner's consent and notice of the purpose (Article 12); transfers need the owner's permission and a recipient able to protect the data (Article 17); data managers keep security units, run a risk assessment at least once a year (Article 23) and respond to intrusions (Article 26). Official data is graded in three security levels (Article 22). The articles on collection, storage, transfer, security and data managers' duties describe no registration step. | |
| Bank of the Lao PDR Banks, deposit-taking institutions and payment service providers | Agreement No. 696/BOL of 6 December 2021 on the management of information technology systems of financial service providers: application systems, risk management, information, network and system security, availability, incident management, and a contingency plan and recovery plan with recovery time and recovery point objectives that the board approves and tests at least once a year. The Law on Payment System (Amended) No. 45/NA of 20 November 2023, promulgated by Presidential Decree No. 003/P of 5 January 2024, has payment business operators meet prudential requirements that include payment system security, and has the operator of a systemically important payment system run business continuity and contingency plans. Neither names an ISO standard. | |
| Ministry of Technology and Communications Digital services, hosting providers and critical information infrastructure owners | Law on Cyber Security No. 87/NA of 25 June 2025 (adopted by National Assembly Resolution No. 163/NA of the same date; published in the Lao Official Gazette on 20 March 2026 and listed as current). It defines critical information infrastructure, computer emergency response teams, third-party service providers (data, cloud, hosting and maintenance services) and cyber threats, and states a state policy of treating cyber security as a priority. The Law on Electronic Data Protection sits alongside it. | |
| Food and Drug Department (FDD), Ministry of Health Food businesses, medicines and medical devices | Law on Food (Revised) No. 33/NA of 24 July 2013, the Ministry's Agreement on Food Registration (Revised) of 28 August 2023 and its Agreement on the Import, Export and Transit of Food (Revised) of 25 September 2024. FDD describes its own role as managing food, medicines and medical products for quality and safety nationwide: it prepares technical standards and rules, studies registration, notification and approval of production, distribution, import and export of food and medical devices, and inspects and assesses good manufacturing practice, good laboratory practice, good storage practice and, for food products, HACCP. It is secretariat to the National Food and Drug Committee and contact point of the Lao Food Codex committee. | HACCP |
| Department of Standardisation and Metrology (DOSM), Ministry of Industry and Commerce Standards, testing and calibration | Law on Standards No. 49/NA of 18 July 2014 and Agreement No. 1925/MOIC of 31 October 2023 on Laboratory Standard Accreditation, which sets out how DOSM accredits testing laboratories and calibration laboratories in eight fields: mechanical, electrical, biological, chemical, construction, non-destructive testing, measurement and calibration, and pharmaceutical. Applicants send a quality manual, equipment and chemical lists, calibration certificates and proficiency-testing or inter-laboratory comparison evidence, and DOSM issues the accreditation certificate. | ISO/IEC 17025 |
| Ministry of Agriculture and Environment Projects and operations with environmental impact | Law on Environmental Protection (Revised), adopted on 28 June 2024 and published in the Lao Official Gazette on 16 December 2024, where the Ministry of Agriculture and Environment is the responsible body. Confirm the implementing rules that apply to your activity with the Ministry. | |
| Ministry of Labour and Social Welfare; Ministry of Industry and Commerce Employers, factories and workplaces | Decree on Occupational Safety and Health, dated 5 February 2019 and published on 25 February 2019 with the Ministry of Labour and Social Welfare as responsible body; the Ministry of Industry and Commerce's Agreement of 7 October 2024 on environment and safety management units in factories; and its Agreement of 9 February 2023 on noise, light and temperature standards for processing and handicraft factories. | |
| Investment Promotion and Management Committee (IPMC); Special Economic Zone Promotion and Management Office Investors, exporters and zone occupiers | Law on Investment Promotion (Revised), adopted 28 June 2024 and published 16 December 2024, which the IPMC describes as combining sector-based and zone-based incentives, and the Decree on Special Economic Zones of 7 June 2018. The IPMC names agriculture, minerals, hydropower-based electricity and tourism as the country's key pillars and lists food processing, garments, construction materials and light industry as expanding manufacturing. Its Special Economic Zone page lists zones that include Savan-Seno, the Vientiane Industrial and Trade Area, Saysettha Development Zone, Thakhek and the Pakse-Japan SME zone. | |
| State Inspection Authority Organisations dealing with public bodies and the public sector | Law on Anti-Corruption (Revised), adopted 28 June 2024 and published in the Lao Official Gazette on 16 January 2025, with the State Inspection Authority as responsible body. The Gazette also lists the Authority's implementation guidance. | |
| Ministry of Agriculture and Environment Farms and producers of agricultural produce | Agreement on Good Agricultural Practice standards for the safety of produce, dated 15 June 2022 and published on 6 July 2022. Confirm the scope and the products it covers with the Ministry. |
Accreditation and recognition
- Department of Standardisation and Metrology (DOSM), Ministry of Industry and Commerce: Accredits testing and calibration laboratories under Agreement No. 1925/MOIC of 31 October 2023, issuing the accreditation certificate after a technical assessment; the Agreement rests on the Law on Standards No. 49/NA of 18 July 2014. The Department is also the standards authority for the Ministry.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Law on State-funded Procurement (Ministry of Finance): Instrument dated 2 November 2017, published 23 March 2018 and listed as current by the Lao Official Gazette, with its implementation guidance. It sets the rules for procurement paid from state funds; each tender document sets its own supplier evidence, so check what the bidding document asks for.
Economic zones
- Special economic zones supervised by the Special Economic Zone Promotion and Management Office: manufacturing and processing, trade and logistics, services and tourism infrastructure
Sterling in Laos
Sterling delivers in Laos from its Ho Chi Minh City office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Laos clients ask
Who accredits laboratories in Laos?
The Department of Standardisation and Metrology, part of the Ministry of Industry and Commerce, accredits testing and calibration laboratories under Agreement No. 1925/MOIC of 31 October 2023, covering eight fields from mechanical to pharmaceutical. The Agreement's provisions on scope and applications mention no international recognition, so ask the Department what applies if your customers abroad need accredited results. Accreditation is the Department's decision, not Sterling's.
Does Laos have a data protection law?
Yes. The Law on Electronic Data Protection, No. 25/NA of 12 May 2017, covers electronic data held by individuals, entities and organisations operating in Laos. It requires consent and notice at collection, permission before transfer, security units and an annual risk assessment, and the ministry for communications oversees it. Confirm how it applies to your processing with Lao counsel.
Which authority oversees food safety in Laos?
The Food and Drug Department of the Ministry of Health. It describes itself as managing food, medicines and medical products for quality and safety, handling registration and import-export approvals for food and medical devices, and inspecting good manufacturing practice and, for food, HACCP. The Law on Food (Revised) of 2013 is the base law. Check the current agreements for your product with the Department.
Do banks in Laos face rules on information technology?
Yes. Bank of the Lao PDR Agreement No. 696/BOL of 6 December 2021 covers risk, security, availability and incident management for financial service providers' systems, and requires a contingency plan and recovery plan with recovery objectives, tested at least once a year. It names no ISO standard. Providers to banks should expect questions on the same topics.
Are audits in Laos run in Lao or in English?
Either can be arranged. Lao is the language of the instruments, and the one English copy of a law seen in the Official Gazette, on payments, carries an unofficial-translation heading. Many firms also work in English. Fix the audit language, interpreter needs and the language of controlled documents with the certification body at application, so site staff and auditors follow each other.
Which sectors drive certification demand in Laos?
The Investment Promotion and Management Committee names agriculture, minerals, hydropower-based electricity and tourism as key pillars, and says that between 2021 and 2025 the country generated 251,052 million kWh of electricity, of which 195,602 million kWh was exported. Food processing, garments and construction materials are growing too, alongside banking. Each buyer sets its own supplier requirements.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Law on Electronic Data Protection — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Agreement No. 696/BOL of 6 December 2021 on the management of information technology systems of financial service providers: application systems, risk management, information, network and system security, availability, incident management, and a contingency plan and recovery plan with recovery time and recovery point objectives that the board approves and tests at least once a year. The Law on Payment System (Amended) No. 45/NA of 20 November 2023, promulgated by Presidential Decree No. 003/P of 5 January 2024, has payment business operators meet prudential requirements that include payment system security, and has the operator of a systemically important payment system run business continuity and contingency plans. Neither names an ISO standard. — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Law on Cyber Security No. 87/NA of 25 June 2025 (adopted by National Assembly Resolution No. 163/NA of the same date; published in the Lao Official Gazette on 20 March 2026 and listed as current). It defines critical information infrastructure, computer emergency response teams, third-party service providers (data, cloud, hosting and maintenance services) and cyber threats, and states a state policy of treating cyber security as a priority. The Law on Electronic Data Protection sits alongside it. — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Law on Food (Revised) No. 33/NA of 24 July 2013, the Ministry's Agreement on Food Registration (Revised) of 28 August 2023 and its Agreement on the Import, Export and Transit of Food (Revised) of 25 September 2024. FDD describes its own role as managing food, medicines and medical products for quality and safety nationwide: it prepares technical standards and rules, studies registration, notification and approval of production, distribution, import and export of food and medical devices, and inspects and assesses good manufacturing practice, good laboratory practice, good storage practice and, for food products, HACCP. It is secretariat to the National Food and Drug Committee and contact point of the Lao Food Codex committee. — laoofficialgazette.gov.la; fdd.gov.la (accessed 18 Oct 2026)
- Law on Standards No. 49/NA of 18 July 2014 and Agreement No. 1925/MOIC of 31 October 2023 on Laboratory Standard Accreditation, which sets out how DOSM accredits testing laboratories and calibration laboratories in eight fields: mechanical, electrical, biological, chemical, construction, non-destructive testing, measurement and calibration, and pharmaceutical. Applicants send a quality manual, equipment and chemical lists, calibration certificates and proficiency-testing or inter-laboratory comparison evidence, and DOSM issues the accreditation certificate. — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Law on Environmental Protection (Revised), adopted on 28 June 2024 and published in the Lao Official Gazette on 16 December 2024, where the Ministry of Agriculture and Environment is the responsible body. Confirm the implementing rules that apply to your activity with the Ministry. — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Decree on Occupational Safety and Health, dated 5 February 2019 and published on 25 February 2019 with the Ministry of Labour and Social Welfare as responsible body; the Ministry of Industry and Commerce's Agreement of 7 October 2024 on environment and safety management units in factories; and its Agreement of 9 February 2023 on noise, light and temperature standards for processing and handicraft factories. — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Law on Investment Promotion (Revised), adopted 28 June 2024 and published 16 December 2024, which the IPMC describes as combining sector-based and zone-based incentives, and the Decree on Special Economic Zones of 7 June 2018. The IPMC names agriculture, minerals, hydropower-based electricity and tourism as the country's key pillars and lists food processing, garments, construction materials and light industry as expanding manufacturing. Its Special Economic Zone page lists zones that include Savan-Seno, the Vientiane Industrial and Trade Area, Saysettha Development Zone, Thakhek and the Pakse-Japan SME zone. — laoofficialgazette.gov.la; investlaos.gov.la (accessed 18 Oct 2026)
- Law on Anti-Corruption (Revised), adopted 28 June 2024 and published in the Lao Official Gazette on 16 January 2025, with the State Inspection Authority as responsible body. The Gazette also lists the Authority's implementation guidance. — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Agreement on Good Agricultural Practice standards for the safety of produce, dated 15 June 2022 and published on 6 July 2022. Confirm the scope and the products it covers with the Ministry. — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Department of Standardisation and Metrology (DOSM), Ministry of Industry and Commerce — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Law on State-funded Procurement — laoofficialgazette.gov.la (accessed 18 Oct 2026)
- Special economic zones supervised by the Special Economic Zone Promotion and Management Office — investlaos.gov.la; laoofficialgazette.gov.la (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Ho Chi Minh City team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
vietnam@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice