New rules deepen concerns about privacy and the reach of national security law
Hong Kong has widened the enforcement powers attached to its national security framework, giving police the authority to demand passwords for phones and computers from people suspected of endangering national security. The change marks another significant expansion of a legal regime that has already transformed the city’s political and civic environment since Beijing imposed the National Security Law in 2020.
Under the new amendments, those who refuse to provide access credentials can face up to one year in prison and a fine of up to 100,000 Hong Kong dollars. The penalties are even steeper for anyone found to have given false or misleading information, with punishment rising to as much as three years in jail. The revised rules also allow customs officials to seize items they believe carry seditious intent, broadening the powers available to the authorities beyond digital access alone.
The Hong Kong government says the changes are necessary to ensure that activities threatening national security can be effectively prevented, suppressed and punished, while also claiming that lawful rights and interests remain adequately protected. Critics, however, are likely to see the move as further evidence that the security architecture continues to expand in ways that narrow privacy protections and increase the risks for political dissent.
Password demands move digital privacy into the center of enforcement
Law enforcement agencies in many jurisdictions already have powers to seek access to electronic devices during criminal investigations. What makes the Hong Kong change more contentious is the breadth of the law under which those powers are being exercised. The National Security Law covers a sweeping and often loosely defined range of offenses, including secession, subversion, terrorism and collusion with external forces.
That means the new password power is not being introduced inside a narrow or highly specific criminal framework. It sits within a security law that critics say can be interpreted expansively and used in cases that go far beyond conventional national security threats. In practical terms, the amendment increases the ability of police to move from suspicion to digital access with potentially serious consequences for individuals whose devices contain private, political or professional communications.
The scope of the new authority is likely to intensify concerns among journalists, activists, lawyers and ordinary residents who fear that devices may now become a more direct gateway into personal networks and private data whenever national security allegations are raised.
The process reinforces concerns about shrinking oversight
The way the change was introduced is also politically significant. The amendments were announced by Hong Kong’s leader, John Lee, without going through the city’s Legislative Council. That route underscores how central the national security framework has become to executive power in the city and how limited the opportunities for public debate or legislative scrutiny can be when the government invokes security justifications.
Authorities insist the changes are lawful and necessary in a volatile geopolitical environment. But for critics, the absence of a broader legislative process reinforces the concern that national security rules are becoming a channel through which significant legal changes can be implemented with minimal public accountability.
The National Security Law has already allowed for exceptional procedures, including the possibility of closed-door trials in some cases. The new amendments build on that structure, adding another enforcement layer in a city where the legal and institutional balance has shifted sharply since the pro-democracy protests of 2019.
The broader crackdown remains the context for every new rule
Since the law took effect, hundreds of protesters, activists and former opposition lawmakers have been arrested. High-profile prosecutions and jail terms have become defining features of the post-2020 political landscape. Recent cases, including penalties against relatives of exiled activists and major convictions under foreign collusion and sedition charges, have reinforced the message that the law is being applied broadly and with lasting political effect.
In that context, the new password powers are unlikely to be viewed in isolation. They arrive as part of a continuing expansion of the security regime, not as a standalone technical measure. Each new amendment adds to a system that critics say has already curtailed free expression, weakened opposition politics and changed the daily calculations of people living and working in the city.
The government argues that these powers are necessary to preserve order and stability. Opponents argue that the concept of national security in Hong Kong has become so wide that it increasingly absorbs normal civil and political space. The new rules over device access crystallize that dispute in a particularly direct way. They turn personal phones and computers into potential evidence gateways under a law whose reach remains one of the most contested issues in the city’s post-handover history.