{"id":5940,"date":"2025-04-07T12:32:59","date_gmt":"2025-04-07T04:32:59","guid":{"rendered":"https:\/\/www.boasecohencollins.com\/?p=5940"},"modified":"2025-04-07T12:33:02","modified_gmt":"2025-04-07T04:33:02","slug":"first-cybersecurity-bill-becomes-law","status":"publish","type":"post","link":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/","title":{"rendered":"First cybersecurity bill becomes law"},"content":{"rendered":"\n

By Claire Chow<\/strong><\/p>\n\n\n\n

Hong Kong, 7 April 2025:<\/strong> A new law designed to enhance the protection of computer systems deemed essential to the smooth running of Hong Kong has been passed by the Legislative Council on 19 March 2025. It is expected to come into effect on 1 January next year.<\/p>\n\n\n\n

The Protection of Critical Infrastructures (Computer Systems) Bill<\/a>, which we flagged last July<\/a> ahead of a public consultation, is this city\u2019s first cybersecurity law and aims to enhance cybersecurity and minimise disruptions caused by cybersecurity incidents to Hong Kong\u2019s essential services. Hence, it covers eight sectors viewed as crucial to the normal functioning of society: energy; information technology; banking; communications; healthcare; and land, air and maritime transport.<\/p>\n\n\n\n

Other infrastructure operators responsible for important social and economic activities, such as managing major sports and performance venues, as well as research and development parks, are also included.<\/p>\n\n\n\n

The legislation requires so-called Critical Infrastructure Operators (CIOs) to take appropriate measures to protect any of their networks that are designated as Critical Computer Systems (CCSs), thus reducing the impact of their operations on society and citizens\u2019 daily lives in the event of a cyberattack. CIOs are ultimately responsible for compliance, even if they employ contractors to run the infrastructure.<\/p>\n\n\n\n

A Commissioner\u2019s Office will be set up under the Security Bureau to oversee the new regime, including drawing up the list of CIOs. For their part, CIOs will face three categories of obligations:<\/p>\n\n\n\n

Organisational:<\/strong> maintain an office in Hong Kong and report any changes in ownership to the Commissioner\u2019s Office; set up a dedicated management unit to oversee the cybersecurity of CCSs; take part in a CCS security drill organised by the Commissioner’s Office after being given written notice.<\/p>\n\n\n\n

Preventative:<\/strong> inform the Commissioner’s Office of material changes to CCSs, such as amendments to design, configuration, security or operation; formulate a CCS security plan and submit it to the Commissioner’s Office; conduct a CCS security assessment at least once a year.<\/p>\n\n\n\n

Incident reporting:<\/strong> formulate an emergency response plan and submit it to the Commissioner’s Office; notify the Commissioner’s Office of serious incidents within 12 hours, or 48 hours for other incidents; co-operate with the Commissioner’s Office in responding to and investigating such incidents, and complying with any written directions or requests.<\/p>\n\n\n\n

The government aims to begin setting up the Commissioner\u2019s Office and shortlisting CIOs by June. However, companies affected by the legislation will not be publicly identified to reduce the risk of them becoming potential terrorist targets. Fines for non-compliance with any aspect of the new regime range up to HK$5 million, with additional daily fines in the event of continuing breaches.<\/p>\n\n\n\n

The government has consistently stressed that the legislation covers only computer systems at large organisations and that it does not target SMEs, personal data or commercial secrets. Further, it does not cover essential services provided by the government, such as water supply and drainage relief, which are already regulated via internal guidelines.<\/p>\n\n\n\n

Organisations and businesses are urged to assess whether they are likely to be designated as a CIO under the new legislation, to review their existing cybersecurity arrangements for any deficiencies and to update practices accordingly, including establishing clear protocols, conducting regular drills and to educate and train staff within your organisation.<\/p>\n\n\n\n

Claire Chow is an Associate with BC&C, having joined the firm in 2019. She covers a broad range of practice areas including Civil and Commercial Litigation, and Judicial Review. She can be contacted at <\/strong>Claire@boasecohencollins.com<\/strong><\/a>.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

By Claire Chow Hong Kong, 7 April 2025: A new law desig […]<\/p>\n","protected":false},"author":2,"featured_media":5937,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[53],"tags":[],"class_list":["post-5940","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-53"],"yoast_head":"\nFirst cybersecurity bill becomes law - \u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/\" \/>\n<meta property=\"og:locale\" content=\"zh_TW\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"First cybersecurity bill becomes law - \u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c\" \/>\n<meta property=\"og:description\" content=\"By Claire Chow Hong Kong, 7 April 2025: A new law desig […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/\" \/>\n<meta property=\"og:site_name\" content=\"\u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-07T04:32:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-07T04:33:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1730\" \/>\n\t<meta property=\"og:image:height\" content=\"817\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Niall Donnelly\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Niall Donnelly\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9810\u4f30\u95b1\u8b80\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\u9418\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/\",\"url\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/\",\"name\":\"First cybersecurity bill becomes law - \u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c\",\"isPartOf\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg\",\"datePublished\":\"2025-04-07T04:32:59+00:00\",\"dateModified\":\"2025-04-07T04:33:02+00:00\",\"author\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#breadcrumb\"},\"inLanguage\":\"zh-TW\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-TW\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#primaryimage\",\"url\":\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg\",\"contentUrl\":\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg\",\"width\":1730,\"height\":817},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"First cybersecurity bill becomes law\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/#website\",\"url\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/\",\"name\":\"\u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c\",\"description\":\"2018\u53ca2019\u5e74\u5ea6\u6700\u4f73\u8a34\u8a1f\u53ca\u722d\u8b70\u89e3\u6c7a\u5f8b\u5e2b\u884c\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-TW\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5\",\"name\":\"Niall Donnelly\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-TW\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hant\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g\",\"caption\":\"Niall Donnelly\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"First cybersecurity bill becomes law - \u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/","og_locale":"zh_TW","og_type":"article","og_title":"First cybersecurity bill becomes law - \u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c","og_description":"By Claire Chow Hong Kong, 7 April 2025: A new law desig […]","og_url":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/","og_site_name":"\u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c","article_published_time":"2025-04-07T04:32:59+00:00","article_modified_time":"2025-04-07T04:33:02+00:00","og_image":[{"width":1730,"height":817,"url":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg","type":"image\/jpeg"}],"author":"Niall Donnelly","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005:":"Niall Donnelly","\u9810\u4f30\u95b1\u8b80\u6642\u9593":"3 \u5206\u9418"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/","url":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/","name":"First cybersecurity bill becomes law - \u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c","isPartOf":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#primaryimage"},"image":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#primaryimage"},"thumbnailUrl":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg","datePublished":"2025-04-07T04:32:59+00:00","dateModified":"2025-04-07T04:33:02+00:00","author":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5"},"breadcrumb":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#breadcrumb"},"inLanguage":"zh-TW","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/"]}]},{"@type":"ImageObject","inLanguage":"zh-TW","@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#primaryimage","url":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg","contentUrl":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/CriticalInfra_PHOTO.jpg","width":1730,"height":817},{"@type":"BreadcrumbList","@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/%e7%b6%b2%e8%aa%8c\/first-cybersecurity-bill-becomes-law\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.boasecohencollins.com\/zh-hant\/"},{"@type":"ListItem","position":2,"name":"First cybersecurity bill becomes law"}]},{"@type":"WebSite","@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/#website","url":"https:\/\/www.boasecohencollins.com\/zh-hant\/","name":"\u5e03\u9ad8\u6c5f\u5f8b\u5e2b\u884c","description":"2018\u53ca2019\u5e74\u5ea6\u6700\u4f73\u8a34\u8a1f\u53ca\u722d\u8b70\u89e3\u6c7a\u5f8b\u5e2b\u884c","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.boasecohencollins.com\/zh-hant\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-TW"},{"@type":"Person","@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5","name":"Niall Donnelly","image":{"@type":"ImageObject","inLanguage":"zh-TW","@id":"https:\/\/www.boasecohencollins.com\/zh-hant\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g","caption":"Niall Donnelly"}}]}},"_links":{"self":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/posts\/5940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/comments?post=5940"}],"version-history":[{"count":1,"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/posts\/5940\/revisions"}],"predecessor-version":[{"id":5942,"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/posts\/5940\/revisions\/5942"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/media\/5937"}],"wp:attachment":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/media?parent=5940"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/categories?post=5940"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hant\/wp-json\/wp\/v2\/tags?post=5940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}