Residents of Hong Kong will face up to one year in prison and fines of HK$100,000 ($12,780) if they refuse to provide police with passwords or decryption methods for electronic devices during investigations under the city’s national security law, the government announced on Monday.
The amendment, effective immediately, targets investigations involving national security offences and requires individuals to give “any password or other decryption method” to enable authorities to access devices believed to contain evidence.
Previously, refusing to provide passwords to unlock phones or computers did not constitute obstruction of justice. The new rules now extend to device owners, authorized users, and anyone who knows the relevant passwords or decryption methods.
The regulations were drafted by Chief Executive John Lee in collaboration with the National Security Commission. A government spokesperson said the changes are intended to ensure that “activities endangering national security can be effectively prevented, suppressed and punished, and at the same time the lawful rights and interests of individuals and organisations are adequately protected.”
Hong Kong first introduced its own security law in 2024, complementing the broader national security framework imposed by China in 2020 following the pro-democracy protests of 2019.
The amendment signals an intensified approach to digital evidence collection and enforcement under the city’s strict security regime.
