Hong Kong has introduced a stringent new regulation that mandates individuals to provide passwords or decryption keys to law enforcement during investigations related to the city’s national security law. Under this rule, anyone who refuses to disclose such information could face imprisonment for up to one year along with a hefty fine of HK$100,000 (approximately $12,780). This marks a significant shift in the legal landscape, emphasizing the government’s intensified efforts to enforce national security measures.
The updated regulation came into effect on Monday and specifically targets cases connected to Hong Kong’s national security law, which was originally imposed by Beijing in 2020. This law was introduced following widespread pro-democracy demonstrations in 2019, some of which escalated into violent confrontations. Since then, the authorities have sought to tighten control and prevent activities deemed threatening to the region’s stability and sovereignty.
One of the key provisions in the new amendment requires individuals under investigation, as well as those who own or have authorized access to electronic devices suspected of containing evidence, to surrender any passwords or methods necessary to decrypt data. This includes not only suspects but also anyone who might know the relevant passwords. Previously, withholding such information did not legally constitute obstruction, but the new rule explicitly criminalizes refusal, reflecting a tougher stance on digital privacy in security-related cases.
The policy was formulated under the guidance of Chief Executive John Lee and the National Security Commission, signaling the administration’s commitment to strengthening enforcement mechanisms. Officials have stated that these measures aim to effectively prevent, suppress, and penalize actions that endanger national security, while simultaneously safeguarding the legitimate rights and interests of individuals and organizations. This balance is presented as a cornerstone of the government’s approach to maintaining order.
It is important to note that Hong Kong had already enacted its own version of the national security law in 2024, supplementing the broader legislation imposed by Beijing. This local law further consolidates the government’s authority to act decisively against perceived threats, particularly in the digital realm where encrypted communications and data storage have become common tools. The new password disclosure requirement is a clear indication of how the authorities intend to leverage technology in their security operations.
As the city continues to navigate the complex aftermath of the 2019 protests and the subsequent legal changes, these developments underscore a broader trend toward enhanced surveillance and control. Critics argue that such measures could infringe on privacy and civil liberties, while supporters contend they are necessary for maintaining peace and stability in a highly sensitive political environment. The coming months will likely reveal how these rules are implemented and their impact on Hong Kong’s social and political fabric.
