On 19 March 2025, Hong Kong’s Legislative Council enacted the Protection of Critical Infrastructures (Computer Systems) Bill (“Bill”), which was gazetted as the Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653) (“Ordinance”) on 28 March 2025.

The Ordinance, which is set to take effect on 1 January 2026, aims to enhance cybersecurity standards in…