On March 19, 2025, the Legislative Council of Hong Kong enacted the Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap.653), following consultation commenced in 2023. It represents Hong Kong’s first comprehensive cybersecurity legislation aimed at safeguarding critical infrastructure from cyber threats and ensuring the reliability of essential services and critical societal and economic activities.
This is against the backdrop that governmental and statutory bodies like the Fire Services Department, Registration & Electoral Office, Electrical and Mechanical Services Department, the Cyberport, the Consumer Council and the Companies Registry have in recent years suffered data leaks.
Hong Kong’s New Cybersecurity Law to Take Effect on January 1, 2026 01_en