Internet & Online Safety · Hong Kong
Online safety & content laws in Hong Kong (2026)
Hong Kong shaded by its internet & online safety status
Hong Kong has no DSA/UK-OSA-style comprehensive online-safety law and imposes no general safety-by-design or proactive monitoring duties on platforms; enforcement is sectoral, complaint-driven and reactive. Targeted statutory regimes exist for doxxing (with takedown/cessation powers) and obscene/indecent online material (co-regulatory with ISPs). Overlaying this, national-security laws grant broad powers to order removal of online information, conduct surveillance, and prosecute online speech (sedition), under which numerous social-media users have been charged since 2024.
Key points
Unlike the EU DSA or UK Online Safety Act, Hong Kong has no unified online-safety statute or single regulator. The regime is decentralised, enforcement-reactive, and generally does not impose pre-emptive content-monitoring or safety-by-design obligations on platforms.
The Personal Data (Privacy)(Amendment) Ordinance 2021 (in force 8 Oct 2021) criminalises doxxing (up to HK$1m fine and 5 years' imprisonment) and empowers the Privacy Commissioner to investigate, prosecute, and issue cessation notices to remove doxxing content, including extra-territorially.
The Control of Obscene and Indecent Articles Ordinance (Cap. 390) applies to internet material, classifying articles as Class I/II/III. Online enforcement is complaint-driven and relies on a self-regulatory Code of Practice with ISPs (HKISPA): warning notices for indecent (Class II) and removal of obscene (Class III) material.
Article 43 implementation rules of the National Security Law and the 2024 Safeguarding National Security Ordinance grant authorities powers to order removal/restriction of online information, demand platform assistance, and conduct device searches and surveillance to curb content deemed to endanger national security.
Since Article 23 took effect in March 2024, sedition (over online posts) has become the most common charge; e.g. in April 2025 an ex-League of Social Democrats member was jailed one year over 145 social-media comments. Authorities openly monitor social media.
There is no statutory online age-verification regime for platforms. Child online safety is pursued through education, the complaint-based COIAO controls, codes for internet-cafe operators (filtering/minor restrictions), and the Mandatory Reporting of Child Abuse Ordinance (effective 2026, not internet-specific).
Timeline - major decisions & events
The HKSAR government gazetted amended Article 43 implementation rules authorizing authorities to require domestic and international internet service providers to remove identifying data and restrict services, alongside new powers to compel device passwords. It significantly broadens state control over online content removal.
Information Services Department (info.gov.hk) ↗Overturning a lower court, the Court of Appeal granted an interim injunction prohibiting dissemination of the song with seditious/secessionist intent, aimed largely at compelling online platforms such as Google and Spotify to remove it. It marked a key test of court-ordered content removal from global internet services.
news.gov.hk ↗Hong Kong's home-grown national security law took effect, criminalizing sedition, external interference and state-secrets offences with penalties up to life imprisonment, and reaching online speech and publication. It layered new domestically-enacted offences atop the 2020 NSL framework.
news.gov.hk ↗The government gazetted amendments updating the procedural rules for national security enforcement measures, including those governing electronic information and online content. It was an interim tightening of the NSL enforcement toolkit.
Information Services Department (info.gov.hk) ↗Long-awaited reform introduced a technology-neutral communication right covering streaming, new internet-use exceptions (parody, satire, quotation), and safe-harbour provisions for online service providers cooperating against piracy. Effective 1 May 2023, it modernized digital copyright after a decade of stalled attempts.
Information Services Department (info.gov.hk) ↗Passed 29 September 2021, the amendment criminalized doxxing and empowered the Privacy Commissioner to issue cessation notices to platforms to take down doxxing content and to investigate and prosecute. It was a direct response to mass doxxing during the 2019 protests.
Privacy Commissioner for Personal Data (PCPD) ↗Hong Kong Broadband Network confirmed it disabled access to protest-doxxing site HKChronicles after a police request under NSL Article 43, the first acknowledged NSL-based website block. It signaled the start of network-level censorship and raised 'Great Firewall' fears.
Hong Kong Free Press ↗The Chief Executive and National Security Committee enacted 115-page rules empowering police to order publishers, platforms, hosting and network service providers to remove or restrict access to electronic content likely to endanger national security. These rules established the legal basis for online content removal and ISP blocking.
news.gov.hk ↗Beijing imposed the National Security Law criminalizing secession, subversion, terrorism and collusion with foreign forces, with Article 43 enabling measures against online content and surveillance of electronic communications. It fundamentally reshaped Hong Kong's internet-content regime.
Information Services Department / ISD ↗The COIAO created the Obscene Articles Tribunal and a three-tier classification system regulating obscene/indecent 'articles', later applied to internet publications requiring statutory warnings for indecent content and prohibiting obscene material online. It remains the foundational content-classification regime governing online material.
Hong Kong e-Legislation ↗Hong Kong - other topics
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →