Hong Kong Police Gain Power to Demand Encryption Keys, Raising Privacy Concerns
A new legal framework in Hong Kong grants police the authority to compel individuals to reveal encryption keys for their devices, including phones and laptops. Refusal to comply is now a criminal offense, sparking significant concerns for travelers and residents alike.
Recent changes to the enforcement of the National Security Law in Hong Kong have granted law enforcement sweeping new powers regarding access to personal electronic devices. According to a security alert issued by the U.S. Consulate General on March 26, authorities can now demand individuals provide passwords or other assistance to access devices, even those just transiting through the airport.
**Key Implications**
* **Compulsory Decryption:** Police can require individuals to provide passwords or other means to access electronic devices.
* **Criminal Penalties:** Refusal to comply with these demands is now a criminal offense under Hong Kong law.
* **Expanded Seizure Powers:** Authorities have expanded powers to seize and retain personal electronic devices if they claim the devices are linked to national security offenses.
The implications of this new law are far-reaching, particularly for privacy-conscious individuals and those handling sensitive information. Security experts recommend exercising extreme caution when traveling to or through Hong Kong, including considering the use of burner devices or avoiding carrying sensitive data altogether. The ability of law enforcement to compel decryption raises serious questions about data security and personal freedom in the region. Consider using strong, unique passwords and enabling full-disk encryption where possible, though these measures may not prevent compelled disclosure.