Authorities in Hong Kong have introduced new rules under the National Security Law that make it a criminal offense to refuse to provide passwords or assist in decrypting personal electronic devices.
The changes, which came into effect on March 23, apply to residents, visitors and even travelers passing through Hong Kong International Airport.
The update gives police broader powers to access data stored on phones, laptops and other devices, and to seize and detain equipment they deem relevant to national security investigations.
The development expands existing enforcement powers and introduces new obligations around digital access.
Hong Kong criminalizes refusal to unlock personal devices
According to the revised rules, according to the American consulateindividuals may be required to provide passwords or assist authorities in decrypting electronic devices during an investigation. Refusal to comply is now considered a criminal offence.
The scope of the law is broad: it covers all personal electronic devices and applies regardless of nationality. This means that foreign nationals, including business and transit passengers, may be subject to the same requirements during their stay in Hong Kong.
Authorities are also authorized to seize and retain devices as evidence if they believe the contents are related to national security concerns. However, the threshold for such decisions is not clearly defined in the public guidelines.
The law extends to travelers and transit passengers
Including transit passengers extends the reach of the policy beyond residents and visitors entering the city. Persons traveling through Hong Kong International Airport may be subject to the same requirements even if they are not formally entering the territory.
This impacts international travelers who routinely carry sensitive personal or corporate data on their devices. Legal obligations may apply regardless of whether a traveler’s stay is temporary or incidental.
Implications for digital privacy and crypto users
While the policy is not specific to digital assets, it has potential implications for individuals who store financial or sensitive information on their devices.
Crypto wallet applications, exchange accounts and authentication tools are often accessed via smartphones or laptops.
In cases where access to a device is mandatory, it can expose account-level information or transaction history, even if the assets themselves remain secured elsewhere.
The changes highlight broader tensions between regulatory enforcement and digital privacy, especially as financial activities become increasingly tied to personal devices.
Final summary
- Hong Kong’s updated rules require individuals to unlock devices on request, expanding enforcement powers under national security law.
- The policy raises new privacy considerations, including for users who access crypto accounts on personal devices.