Hong Kong: Protection of Critical Infrastructures (Computer Systems) Ordinance including local operations requirement introduced to Legislative Council

On 6 December 2024, Protection of Critical Infrastructures (Computer Systems) Ordinance (Ordinance No. 4 of 2025) including local operations requirement was introduced to the Legislative Council. The Ordinance would apply to operators of critical infrastructures, including infrastructure that is essential to the continuous provision of certain essential services or which, if damaged, would hinder or substantially affect critical societal or economic activities in Hong Kong. Critical infrastructure operators would be required to maintain a Hong Kong office and notify any changes to its address. Operators who fail to do so can be liable for HKD 3 million, with a continuing daily HKD 60'000 fine, on summary conviction and HKD 5 million, with a continuing daily HKD 100'000 fine, on conviction on indictment.