This regulation was introduced through amendments published on Monday. Officials are set to provide a briefing to lawmakers, but the provisions are already attracting attention—particularly among travelers with personal or work devices.
The implications of the new password rule for travelers
For travelers, this regulation indicates increased scrutiny of digital devices in specific national security contexts.
Under the revised framework, Hong Kong police can mandate individuals under investigation to supply passwords or technical assistance to access electronic devices, including phones, laptops, and other storage media.
Failing to comply can lead to penalties of up to one year in prison, alongside a financial fine.
Providing false information can exacerbate these penalties, potentially resulting in a three-year prison sentence and increased fines.
The requirement is not restricted to the device owner; anyone who is believed to know the password—including past users or those with access—may also be compelled to assist.
Expanded powers for authorities
The amendments extend beyond just device access. Customs officials now have broader authority in national security cases, including the freezing and confiscation of assets related to suspected offenses.
Additionally, there is an adjustment in the treatment of ‘foreign agents.’ The maximum penalty for non-compliance with information requests has been raised to one year in jail.
According to the law, a foreign agent is defined as an individual acting on behalf of foreign governments, political entities, or specific international organizations.
Furthermore, a new legal avenue has been established, allowing individuals identified as foreign agents to petition a court to contest or modify data requests.
Background and legal context
These changes come in the wake of a ruling by Hong Kong’s highest court last year, which overturned convictions associated with a national security data request due to insufficient evidence and concerns regarding fair trial standards.
Authorities maintain that the amendments aim to address the gaps identified in that case.
A government spokesperson remarked that the rules ‘only enhance’ enforcement capabilities and align with the Basic Law and human rights protections, adding that “law-abiding persons will not inadvertently contravene the law.”
Practical implications
While the law is not intended for routine checks, the expanded powers mean that access to personal data can be legally mandated under certain circumstances.
The changes are part of Hong Kong’s broader national security framework established in 2020—a system that authorities argue is necessary for stability, while critics continue to challenge its reach.
