Corporate Legal Services

How Often Should a Company Review and Update Its Internal Policies?

How Often Should a Company Review and Update Its Internal Policies?

The frank answer: there is no single legally mandated answer for how often a company must review and update its internal documents. No statute says “every business must review its internal rules once a year”. The review cycle is a governance matter — it depends on the document type, the industry, and how fast the relevant law changes. This article identifies the rare legal touchpoints that do set specific timelines, then gives a recommended review checklist by document category.

1. The sector-specific legal touchpoint: insurance

Among industries, insurance has specific periodic compliance-check rules: Article 13 of Circular 70/2022/TT-BTC requires insurance enterprises to conduct compliance inspections annually and on an ad-hoc basis, with quarterly and annual reporting. This is an insurance-sector obligation — it must not be stretched into “all businesses must review annually by law”. Companies outside insurance are not subject to it.

2. Two labor documents with their own legal clocks

A company’s internal document system typically revolves around two key labor instruments, each with its own legal timeline — distinct from a “review cycle”:

  • Internal labor regulations: Article 119 of the Labor Code 2019 requires registration with the Department of Home Affairs within 10 days of issuance; amendments must be re-registered. This is a registration duty, not a periodic review cycle — but in practice, every change in labor legislation is a reason to revisit the regulations.
  • Collective labor agreements: valid for 01 to 03 years under Article 78.3 of the Labor Code 2019. Note: many websites mis-cite this as “Article 73” — the correct provision is Article 78.3. If the agreement expires without renewal, the company loses its negotiated collective framework.

3. Practice: annual review plus ad-hoc reviews when law changes

Although the law imposes no general duty, sound governance practice is:

  • Annual review of the entire internal document system (regulations, financial rules, confidentiality policies, approval workflows) — as yearly maintenance.
  • Ad-hoc review immediately when new legislation affects operations (a new law or guiding decree), or when the business changes its model or organizational structure.
  • Fast-moving areas (cybersecurity, personal data protection): practice is monthly or quarterly review, given constantly evolving legal frameworks and risks.

Emphasis: these cycles are governance recommendations, not legal duties — do not report that “the law requires annual review”.

4. Checklist: internal documents by review cycle

  • Internal labor regulations: revisit whenever the Labor Code or guiding instruments change; ensure registration/re-registration within the 10-day rule of Labor Code Article 119.
  • Collective labor agreements: track the 01–03 year term (Labor Code Art. 78.3); start renegotiation before expiry.
  • Financial rules, spending approval workflows: annual review, aligned with new tax and accounting policies.
  • Confidentiality, cybersecurity and data rules: quarterly review (or monthly for tech companies), updated with sector legal developments.
  • Company charter: review when the Law on Enterprises or its guiding decrees (currently Decree 168/2025/ND-CP) change relevantly.

Frequently asked questions

Does the law require every company to review internal documents annually?
No. Only specific sectors (such as insurance under Circular 70/2022/TT-BTC Art. 13) have periodic compliance-check duties. For ordinary companies, annual review is good governance practice, not a legal duty.

Must amended labor regulations be re-registered?
Yes. Labor Code Article 119 requires re-registration with the Department of Home Affairs within 10 days of issuing amended regulations.

Which article governs the collective agreement term?
Article 78.3 of the Labor Code 2019 (term of 01–03 years). Many sources wrongly cite Article 73 — check the original text.

When is an ad-hoc review mandatory in practice?
When new legislation directly impacts the business (e.g. a new tax law affecting financial rules), when a violation or incident reveals gaps in current documents, or when the business model changes.

Sources

  • Circular 70/2022/TT-BTC, Art. 13: annual and ad-hoc compliance inspections for insurance enterprises; quarterly/annual reporting (insurance sector only).
  • Labor Code 45/2019/QH14: Art. 119 (registration of labor regulations within 10 days; re-registration on amendment); Art. 78.3 (collective labor agreements, 01–03 year term).
  • The “annual”, “quarterly” and “monthly” cycles in this article are governance practice, not generally mandated legal duties.

Need a comprehensive review of your internal document system — labor regulations, financial rules, confidentiality policies — to ensure alignment with current law? Reach us via the Contact page of FLAT Law Firm.

The legal content of this article is reviewed by FLAT’s AI Legal Council and submitted to the owner for approval; it is not an opinion of a licensed lawyer and does not replace legal advice for specific cases.

For reference only, not legal advice.