New Cybersecurity Obligations For Critical Infrastructure In Hong Kong SAR

New legislation will create more obligations for operators of critical infrastructure and computer systems throughout Hong Kong Special Administrative Region (SAR), in an effort to address and prevent future cybersecurity disruptions.

The Hong Kong Emergency Response Team Coordination Centre handled over more than 19,000 cybersecurity incidents in 2024 alone, a 35% increase compared to the previous year.

Despite this increase, Hong Kong SAR had no statutory requirements for the protection of computer systems within its critical infrastructure (CI). The growing dependence on digital technologies has become deeply integrated into society, making the safeguarding of this infrastructure essential for the security and functionality of vital services.