Hong Kong's assault on privacy and personal freedom

Global Watch | 2026-05-25

Hong Kong police can now require individuals suspected of endangering national security to hand over passwords, decryption keys or other assistance to access phones, laptops and tablets.

The move forms part of updated implementing rules under the 2020 national security law and carries stiff penalties.

Those penalties include up to one year in jail and a HK$100,000 fine (approximately $12,800) for refusal, or up to three years and HK$500,000 (approximately $64,000) for providing false or misleading information.

The U.S. Consulate General in Hong Kong warned that the legal change applies to people "arriving or just transiting Hong Kong International Airport."

Canadian travel guidance similarly says that refusing to comply may result in imprisonment or fines.

The scope is unusually wide.

It covers not only those formally under investigation but also anyone authorities believe may hold relevant information, including foreign nationals and passengers who never leave the airport.

That reach reflects broader concerns about pressure extending beyond formal suspects into civic, professional and cross-border spaces.

Hong Kong's government has rejected criticism of the changes, saying officers generally must have reasonable grounds and authorization from a magistrate before searching electronic equipment.

A government spokesman said there is "no case that the police can randomly ask ordinary citizens on the street" for devices and passwords.

Powers extend broadly

Unlike typical border searches in the United States or Europe, where refusal might lead only to denied entry or temporary detention, Hong Kong's framework imposes criminal liability.

No exemptions exist for journalists, business travelers or layover passengers. Hong Kong Watch, a U.K.-based rights group, said the rules compel lawyers, doctors and journalists to comply, "eliminating a critical layer of confidentiality" and placing travelers at risk of device access.

Authorities can also seize and retain devices they link to national security offenses, a term left deliberately broad. The amendments also allow customs officers to seize items deemed to have "seditious intention," even when no person has been arrested for a national security offense.

U.K.-based law lecturer Urania Chiu, who researches Hong Kong affairs, described the provisions as interfering with fundamental liberties.

"The sweeping powers given to law enforcement officers without any need for judicial authorization are grossly disproportionate to any legitimate aim the bylaw purports to achieve," she said.

Chung Ching Kwong, a senior analyst at the Inter-Parliamentary Alliance on China, has similarly framed the rules as a clear invasion of privacy that interferes with basic rights.

Hub status challenged

The amendments deepen concerns about Hong Kong's evolution from a freewheeling international financial center into a jurisdiction more closely aligned with the controls of mainland China.

Business travelers carrying proprietary data or sensitive client information now face heightened exposure.

Legal analyses note that even brief stops at Hong Kong International Airport carry new digital risks, potentially disrupting deal flows, supply-chain logistics and executive mobility across Asia. Mayer Brown, a global law firm, said the rules should be read as part of "the expanding reach of electronic device searches" and noted that warrantless searches may still occur in certain circumstances.

Foreign companies are already weighing the territory's attractiveness amid successive national security measures.

The criminal penalties here exceed those in many comparable jurisdictions, where device searches at borders rarely trigger prosecution. Australia's Smartraveller advisory says Hong Kong's national security laws "can be interpreted broadly" and warns that authorities can request access to personal electronic devices and passwords from anyone in Hong Kong, including those transiting through the airport.

For Hong Kong, long valued for its rule-of-law reputation and open data environment, the shift risks further eroding confidence among international investors and transit users.

Travel-risk advisers increasingly recommend device sanitization, the use of clean loaner equipment and careful route planning.

Some firms quietly reroute sensitive shipments or personnel to avoid the territory.

While authorities argue the changes target genuine threats without harming legitimate activity, the cumulative effect of expanded surveillance powers continues to reshape perceptions of risk in one of Asia's busiest hubs.

The measure fits a longer pattern of tightening digital oversight since 2020 as Beijing-linked governance models increasingly emphasize surveillance, censorship, narrative control and the deterrence of dissent.

For governments, businesses and travelers navigating the Indo-Pacific, it underscores the need to assess not only physical security but also the expanding reach of state access to personal and corporate data.

Hong Kong's latest rules serve as a practical reminder that privacy expectations in the territory have narrowed, even for those who never intend to stay.