Hong Kong Police Granted Sweeping Powers to Demand Device Passwords in Security Probes

HONG KONG – Hong Kong authorities have enacted new amendments to the city’s National Security Law, granting law enforcement agencies broad powers to compel individuals under investigation to surrender passwords and decryption methods for their electronic devices. The new rules, which took immediate effect on Monday, March 23, 2026, significantly expand the state’s ability to access personal digital information, drawing sharp criticism from human rights advocates and legal experts who warn of deepening erosion of privacy and fundamental liberties in the semi-autonomous territory.

The amendments, implemented without legislative review by Chief Executive John Lee and the Committee for Safeguarding National Security, introduce stringent penalties for non-compliance. Individuals who refuse to provide passwords or decryption keys face up to one year in prison and a fine of HK$100,000 (approximately US$12,773). Providing false or misleading information to authorities can result in even harsher punishment, with sentences up to three years imprisonment and a HK$500,000 fine. This marks a pivotal moment in Hong Kong’s evolving legal landscape, further cementing the reach of the Beijing-imposed National Security Law (NSL) that has reshaped the city since its introduction in 2020.

Expanded Digital Surveillance and Penalties

The core of the new directive lies in amendments to the implementation rules of Article 43 of the National Security Law. These changes empower police officers investigating national security offenses to demand "any password or other decryption method" necessary to access electronic equipment believed to contain evidence. The mandate extends beyond the direct suspect to include anyone who owns, possesses, is authorized to access, or knows the password or decryption method for the device in question.

Previously, refusing to provide a password to unlock a digital device did not automatically constitute an obstruction of justice. However, the newly introduced penalties underscore a concerted effort by authorities to close perceived loopholes and ensure unfettered access to digital communications and stored data. Law enforcement in many jurisdictions globally possess powers to request device access during criminal investigations, but critics argue that the broad and often vaguely defined scope of offenses under Hong Kong's National Security Law makes these new powers particularly concerning.

Beyond digital devices, the amendments also grant additional powers to customs officers, allowing them to seize items deemed to have "seditious intention," even if no person has been arrested for a national security offense related to those items. Furthermore, police, with the approval of the Secretary for Security, can now order the removal of electronic messages considered likely to constitute or incite national security crimes, instructing publishers, platform operators, hosting services, or network providers to remove or restrict such content.

Unilateral Implementation and Legal Foundations

The amendments were announced and implemented by the Hong Kong government on Monday, March 23, 2026, bypassing the city’s Legislative Council. This unilateral approach, utilizing powers vested in the Chief Executive and the Committee for Safeguarding National Security, has become a hallmark of significant policy shifts under the NSL. Government officials are scheduled to brief lawmakers on these changes, but their enactment precedes any legislative debate or approval.

The original National Security Law was imposed by Beijing in June 2020, following months of widespread pro-democracy protests that shook the city in 2019. Beijing and Hong Kong officials have consistently maintained that the law was essential to restore stability and order in the city after the unrest. It criminalizes acts of secession, subversion, terrorism, and collusion with foreign forces, with penalties ranging up to life imprisonment. The latest amendments are presented by the authorities as necessary refinements to the NSL's enforcement mechanisms, drawn from "years of case-handling experience" to enhance capabilities amid "complex and unpredictable geopolitical risks."

Government's Justification: Stability and Security

Hong Kong government spokespersons have articulated that the new powers are crucial for effectively preventing, suppressing, and punishing activities that endanger national security. They argue that these measures are vital to safeguard the constitutional duty of protecting national security and ensure that stability is maintained. Officials insist that the revisions fully comply with the Basic Law, Hong Kong's mini-constitution, including its human rights provisions, and will not affect the daily lives of ordinary citizens or the normal operation of institutions.

A government spokesman highlighted that the revised rules "set out stringent requirements" by detailing the circumstances under which law enforcement can exercise these powers and incorporate mechanisms with the judiciary playing a "gatekeeping role" for various measures. This perspective emphasizes the perceived legal grounding and necessity of the amendments in a challenging global environment.

Erosion of Privacy and Human Rights Concerns

Despite government assurances, the amendments have ignited a wave of alarm among legal academics, human rights organizations, and international observers. Critics contend that these sweeping new powers severely undermine fundamental liberties, including the privacy of communication and the right to a fair trial. Urania Chiu, a UK-based law lecturer specializing in Hong Kong, remarked that the "sweeping powers given to law enforcement officers without any need for judicial authorisation are grossly disproportionate to any legitimate aim the bylaw purports to achieve."

Concerns are particularly acute regarding the lack of explicit judicial authorization for demanding passwords, which some interpret as granting law enforcement unchecked authority. The broad language of the NSL, which has been criticized for its ambiguity, exacerbates these worries, as it could potentially allow for arbitrary application of these new powers. The fear is that the amendments will further chill free expression and digital dissent, as individuals may self-censor online activities and communications to avoid potential scrutiny.

The requirement to incriminate oneself by providing passwords and the potential for severe penalties for non-compliance also raise questions about legal safeguards and due process. The amendments are viewed by some as another step in an ongoing trend of tightening controls and diminishing the autonomy and distinct legal framework that once characterized Hong Kong.

Conclusion: A Deepening Digital Divide

The introduction of new rules compelling individuals to surrender their electronic device passwords marks a significant expansion of state power under Hong Kong's National Security Law. While authorities maintain these measures are indispensable for maintaining stability and combating national security threats, critics see them as a grave infringement on individual privacy and digital rights. The move underscores a deepening divide between the government's imperative for control and the public's concerns over shrinking freedoms. As Hong Kong continues to navigate its complex relationship with mainland China, the ramifications of these expanded digital surveillance powers for its residents, businesses, and its reputation as a global financial hub are likely to be profound and far-reaching.