Hong Kong Imposes Jail Term for Refusing to Hand Over Passwords in National Security Cases

Hong Kong’s government has announced that anyone who refuses to provide passwords or decryption methods during national security investigations could face up to one year in prison or a HK$100,000 fine. The rule, part of amendments to the China-imposed 2020 national security law, applies to those under investigation, anyone with access to the devices, or anyone who knows the passwords. It overrides professional confidentiality duties, affecting journalists, lawyers, and doctors. Authorities say the law ensures security and stability, while critics warn it suppresses democratic freedoms and political dissent.

The Hong Kong government announced on Monday that individuals who refuse to provide passwords for their phones or computers during investigations tied to national security offences could face a prison sentence of up to one year, along with a possible fine. The move reflects a tightening of legal requirements around digital access as authorities seek broader powers to obtain electronic evidence in sensitive cases.
This development forms part of a wider set of amendments to Hong Kong’s national security framework, a law that was imposed by China in 2020 after the city experienced massive pro-democracy protests. Those demonstrations, which drew global attention, were fueled by concerns over increasing influence from Beijing and fears about the erosion of civil liberties in the semi-autonomous territory. Since then, the law has remained a central pillar in shaping Hong Kong’s political and legal landscape.
Under the revised provisions, individuals are required to hand over “any password or other decryption method” necessary for law enforcement officers, operating with a valid warrant, to access electronic devices believed to contain evidence relevant to national security investigations. This includes smartphones, computers, and other digital storage systems. Authorities argue that without such access, critical evidence could remain hidden, potentially obstructing investigations and undermining enforcement efforts.
Failure to comply with this directive carries significant penalties. Individuals who refuse to provide the requested information could face a fine of up to HK$100,000, equivalent to about $12,700 or €11,000, or imprisonment for up to one year, or both. The penalties underscore the seriousness with which authorities are approaching compliance under the revised law.
The scope of the amendment is notably broad. It does not only target individuals who are directly under investigation but also extends to anyone who owns, controls, or is authorized to access the devices in question. In addition, the law applies to any person who has knowledge of the password or decryption method, even if they are not the primary user of the device. This expansive coverage is designed to close potential loopholes that could allow individuals to avoid cooperation by transferring access or responsibility to others.
Another key aspect of the amendment is its stance on confidentiality. The law explicitly states that the obligation to provide passwords applies even in cases where there are existing legal or professional duties that would normally prevent disclosure. This includes professions such as journalism, law, and medicine, where confidentiality is typically protected. By overriding these protections, the law emphasizes that national security considerations take precedence over other forms of privileged communication in such situations.
A spokesperson for the Hong Kong government stated that the updated rules are intended to ensure that activities considered harmful to national security can be effectively prevented, controlled, and punished. At the same time, the government maintains that the legal rights and interests of individuals and organizations will continue to be safeguarded within the framework of the law. Officials argue that these measures are necessary to maintain order, protect public safety, and preserve the city’s stability.
Authorities in Hong Kong, along with officials in Beijing, have consistently defended the national security law, saying it has helped restore calm and stability to the financial hub after the unrest of 2019. They argue that the legislation has created a safer environment for businesses and residents alike, reducing the risk of large-scale disruptions.
However, the law and its subsequent amendments have faced strong criticism from human rights organizations and several Western governments. Critics argue that the measures have been used to significantly narrow democratic freedoms, limit freedom of expression, and suppress political opposition. They also warn that requirements such as mandatory password disclosure could have a chilling effect on digital privacy, press freedom, and professional confidentiality, leading to increased self-censorship and fear among residents.
The latest amendment highlights the ongoing tension between national security enforcement and the protection of individual rights in Hong Kong. As authorities continue to expand their powers under the legal framework, the balance between maintaining stability and preserving civil liberties remains a subject of intense debate both within the city and internationally.