Hong Kong Expands Security Law to Allow Police Access to Device Passwords

Those who refuse to comply can face up to one year in jail and a fine of HK$100,000 (about ₹11.88 lakh), while people who provide false or misleading information can face as much as three years in prison and a fine of HK$500,000 (about ₹59.9 lakh). The amendments were made under Article 43 implementation rules tied to the national security law Beijing imposed on Hong Kong in 2020, and officials said lawmakers would be briefed afterward rather than asked to approve the changes in advance.

FCRF Launches Premier CISO Certification Amid Rising Demand for Cybersecurity Leadership

For Hong Kong authorities, the move was presented as an exercise in legal maintenance under extraordinary conditions. A government statement said the amendments were meant to ensure that acts endangering national security could be “effectively prevented, suppressed and punished,” while also protecting lawful rights and interests. Officials said the changes conformed with the Basic Law and the city’s human rights provisions, and argued that the revised rules would not affect ordinary life or the normal functioning of institutions.

For critics, the significance lay elsewhere: in how much discretionary power the state now claims in a category of offenses that is itself expansively defined. The national security law covers crimes including secession, subversion, terrorism and collusion with foreign forces, with potential penalties up to life imprisonment. Since its enactment, according to Hong Kong’s Security Bureau, 386 people and four companies have been arrested on national security charges, and 176 people and four companies have been convicted.

A Security Law That Keeps Expanding

The 2020 national security law arrived after the mass pro-democracy protests of 2019, when Hong Kong was convulsed by months of demonstrations, clashes with police and demands for greater democratic accountability. Beijing and Hong Kong officials defended the law as essential to restoring order and preventing the city from becoming, in their telling, a base for destabilizing China. Western governments, rights groups and many local critics saw it instead as the legal architecture of a new political era, one designed to narrow the space for opposition and dissent.

The amendments announced Monday fit into that longer trajectory. The Hong Kong government said it had gained several years of “practical and implementation-related experiences” in applying the Article 43 rules and was clarifying procedures while strengthening enforcement tools. In the official explanation, the city’s leaders linked the changes to what they described as a “complex and volatile geopolitical situation” and to a continuing constitutional duty to improve national security enforcement mechanisms.

That framing is familiar in Hong Kong now. Since the law’s introduction, the government has repeatedly described national security as a permanent governing priority rather than a temporary response to unrest. Earlier subsidiary legislation under the Safeguarding National Security Ordinance was similarly justified as necessary to improve enforcement mechanisms and carry out the mandate of China’s Office for Safeguarding National Security in Hong Kong.

The Politics of a Password

The power to demand passwords may sound, at first glance, like a routine investigative tool in the digital age. Police forces in many jurisdictions can compel access to evidence under certain legal standards. But in Hong Kong, the context matters as much as the power itself. National security offenses are broad, politically charged and often tied not only to conduct but to speech, association, publication and contact with overseas actors.

Under the amended rules, police may require a person under investigation for suspected national security offenses to provide any password or decryption method for an electronic device and to give “any reasonable and necessary information or assistance.” Customs officers, meanwhile, may seize items deemed to have “seditious intention” even if no one has yet been arrested over those items.

The government has insisted that the amendments contain safeguards, saying the rules specify the circumstances in which powers may be used and preserve a gatekeeping role for the judiciary in various measures. But critics argue that the legal problem is not merely procedural; it is structural. Reuters reported that Urania Chiu, a U.K.-based law lecturer who researches Hong Kong, said the provisions interfered with fundamental liberties, including privacy of communication and fair-trial rights, and criticized the absence of judicial authorization for some enforcement powers.

In a city where political organizers, journalists, former lawmakers and civil society figures have already faced prosecution, the ability to compel access to encrypted devices carries a significance beyond ordinary evidence gathering. Phones are no longer simply repositories of messages and photographs; in cases of political policing, they can contain networks, drafts, donor trails, private conversations, contact lists and traces of association that map an entire civic life. That is why the legal meaning of access, in Hong Kong, is inseparable from the political meaning of suspicion. This is an inference based on the scope of the new powers and the types of offenses covered by the law.

Bypassing Debate, Preserving Control

The method of enactment was also revealing. Reuters reported that the amendments were gazetted using powers that bypassed Hong Kong’s legislature, with officials set to brief lawmakers afterward. That sequence underscored how national security policymaking in the city now often proceeds: first through executive action justified by urgency and constitutional duty, and only then through limited institutional explanation.

Hong Kong officials maintain that this process remains lawful and consistent with the city’s constitutional order. Monday’s government statement said the amendments were made by the chief executive in conjunction with the Committee for Safeguarding National Security, exercising powers conferred under Article 43 of the 2020 law. The government described the changes as enhancements to enforcement capacity based on court experience and operational practice.

Yet the broader pattern has become difficult to miss. In May 2025, Hong Kong approved subsidiary legislation under the Safeguarding National Security Ordinance that, among other things, provided new offenses for failing to comply with legal instruments, providing false or misleading information, or disclosing information related to investigations by Beijing’s national security office in the city. That legislation also took effect immediately after being gazetted.

The cumulative effect is a legal order in which the state’s powers are not only expansive but iterative. Each new regulation may appear narrow when viewed in isolation. Together, they build a system in which exceptional powers are normalized through administrative layering rather than singular dramatic decrees. That is an inference drawn from the sequence of subsidiary legislation and the official rationale accompanying it.

A City Recast by National Security

By now, the law’s consequences are visible not merely in statutes but in the biographies of those caught within them. Reuters reported that media tycoon Jimmy Lai was sentenced in February to 20 years in prison for collusion with foreign forces and sedition, a case that drew international criticism. The same month, according to the source material you provided, the father of an exiled pro-democracy activist was jailed under a homegrown security law after trying to cash out her insurance policy.

These cases reflect a shift in how national security is enforced in Hong Kong: not only against protest leaders or public campaigners, but across family ties, financial dealings, publishing, speech and now digital access. The law’s defenders argue that this is precisely the point — that national security threats are diffuse, adaptive and cannot be addressed with narrow tools. Its critics argue, just as forcefully, that the category has become so elastic that it swallows ordinary civil and political life.

What Monday’s amendments make plain is that Hong Kong’s security state is still being assembled. The city is no longer simply living under a national security law imposed in 2020; it is living through the continuous refinement of that law into an operating system of governance, one that increasingly treats access — to spaces, institutions, records, publications and private devices — as an essential instrument of political control. That conclusion is an analytical reading of the amendments and their place in the broader post-2020 legal trajectory.