A recent amendment to Hong Kong's enforcement of the National Security Law has granted police the authority to demand that individuals reveal encryption keys for their electronic devices, including smartphones and laptops. This change, announced by the U.S. Consulate General, highlights a significant shift in the enforcement landscape, where even individuals merely transiting through the airport can be subjected to such demands. This legal framework poses a potential threat to personal data security and raises serious concerns about the protection of sensitive information.
For businesses, the implications of this law are profound, particularly for those operating in or interacting with Hong Kong. Companies may need to reassess their data protection strategies and consider the risks associated with storing sensitive information on devices that could be subject to such legal demands. This situation necessitates a reevaluation of encryption practices and compliance frameworks to safeguard against potential breaches of privacy and security. As cybersecurity and AI continue to evolve, understanding and adapting to the legal landscape surrounding encryption will be crucial for maintaining trust and safeguarding critical business information.
---
*Originally reported by [Schneier on Security](https://www.schneier.com/blog/archives/2026/04/hong-kong-police-can-force-you-to-reveal-your-encryption-keys.html)*