Hong Kong

Supporting Adoption of Artificial Intelligence in Fighting Financial Crime

Hong Kong - LCQ6: Regulation and Development of AI Technology

The Hong Kong government, aligning with the National 15th Five-Year Plan, is accelerating AI industrialization while emphasizing safe, ethical, and responsible use. The government is developing governance measures for AI in Hong Kong.

Joint Circular on the Expansion of the Generative Artificial Intelligence Sandbox

Cybersecurity regulation in Protection of Critical Infrastructures (Computer Systems) Ordinance (Ordinance No. 4 of 2025)

On 1 January 2026, the Legislative Council's Protection of Critical Infrastructures (Computer Systems) Ordinance (Ordinance No. 4 of 2025) including cybersecurity regulation enters into force following designation by the Secretary for Security. The Ordinance establishes cybersecurity obligations for operators of critical infrastructures, including infrastructure that is essential to the continuous provision of certain essential services or which, if damaged, would hinder or substantially affe...

Licksun Company Limited v Occupiers of Lot No. 552

Pro Se Litigant appeared before the District Court. Fabricated: Case Law | One of six authorities lodged by the Plaintiff was found not to exist; court described it as suspiciously incomplete and the Plaintiff abandoned reliance.

Yu Hon Tong Thomas v Centaline Property Agency

Pro Se Litigant used Unidentified in proceedings before the High Court. Misrepresented: Case Law | Application and Addendum contained citations to Canadian court cases assembled by AI; court held those authorities to be inapplicable to Hong Kong law on Employment Ordinance s70.

Securities and Futures Commission investigation into licensed corporations's compliance with cybersecurity obligations

On 6 February 2025, the Securities and Futures Commission (SFC) concluded its 2023/24 thematic cybersecurity review of licensed corporations (LC) in Hong Kong. The review assessed compliance with existing cybersecurity requirements, focusing on emerging risks such as phishing attacks, end-of-life (EOL) software, and third-party provider management. The SFC surveyed 50 LCs of various sizes and business types, conducted on-site inspections of seven internet brokers, and held discussions with si...

SFC circular to licensed corporations on use of generative AI models in financial sector

On 12 November 2024, the Securities and Futures Commission (SFC) issued a circular addressing the use of generative AI models by licensed corporations (LCs) in the financial sector. The circular outlines obligations for LCs to manage potential risks associated with the use of AI models. LCs must ensure robust governance and oversight, with senior management held accountable for policies, procedures, and staffing associated with AI use. LCs are also responsible for model risk management, parti...

HKMA Guideline on the Use of Artificial Intelligence for Monitoring of Suspicious Activities

On 9 September 2024, the Hong Kong Monetary Authority (HKMA) issued a Guideline on the Use of Artificial Intelligence for Monitoring of Suspicious Activities, encouraging authorised institutions in the financial sector to adopt artificial intelligence (AI) systems for monitoring suspicious activities related to money laundering and terrorist financing. The Guideline points out that monitoring systems using AI can take into account a broad range of contextual information and can be more effect...

HKMA Guidance on Provision of Custodial Services for Digital Assets

On 20 August 2024, the Hong Kong Monetary Authority (HKMA) guidance on the provision of custodial services for digital assets enetred into force. The guidance applies to authorised institutions (AIs) and subsidiaries of locally incorporated AIs that conduct digital asset custodial activities. The AIs are required to inform the HKMA of their intention to provide digital asset custodial services and must be compliant with the standards and requirements. The guidance, aimed at AIs interested in ...

HKMA Circular on consumer protection regarding use of Generative Artificial Intelligence

On 19 August 2024 the Hong Kong Monetary Authority (HKMA) issued a circular with guiding principles for consumer protection with respect to the use of generative Artificial Intelligence (GenAI) in customer-facing applications. The circular builds on the “Consumer Protection in respect of Use of Big Data Analytics and Artificial Intelligence by Authorized Institutions” of 5 November 2019 (2019 BDAI Guiding Principles) and sets out additional principles to ensure appropriate safeguards for cons...

Government launches public consultation on enhancing Copyright Ordinance regarding protection for artificial intelligence technology development

Safeguarding National Security Bill implementing Basic Law Article 23 Legislation

On 8 March 2024, the Safeguarding National Security Bill implementing Article 23 of the Basic Law was introduced in the Legislative Council of Hong Kong Special Administrative Region (SAR). The Bill covers the government's constitutional duty to safeguard national security, recommendations on offences, and measures to give proportionate extraterritorial effect to some offences. The Bill addresses risks posed by new information technologies and would classify actions endangering national secur...

Hong Kong Cybercrimes Regulations

On 19 October 2022, the Sub-Committee on Cybercrime of the Law Reform Commission of Hong Kong closed its consultation on cyber-dependent crimes and jurisdictional issues. The paper proposes new cybercrime legislation to cover five new types of cyber crimes, such as unauthorised access to programmes or data, unauthorised interception, disclosure or use of computer data for criminal or dishonest purposes. In addition, the document proposes the reorganisation of the offence of computer misuse, i...

Isreal-Hong Kong trial on Central Bank Digital Currency Cybersecurity

On 16 June 2022, the Hong Kong Monetary Authority (HKMA), the Bank of Israel and the Bank for International Settlements Innovation Hub (BISIH) Hong Kong Centre, announced a collaboration to test the cybersecurity of a two-tier retail Central Bank Digital Currency (CBDC). The project will focus on data security in a two-tier retail CBDC architecture where the intermediaries have no financial exposure and is expected to be completed by the end of 2022.