Hong Kong: Security

Pension schemes face increased cyber threats due to their valuable data and complex supplier chains. Regulatory expectations now require trustees to establish robust cyber defenses, monitor risks, map data flows, and maintain incident response plans, ensuring compliance with both the Pensions Regulator and ICO standards.

In early July 2024, the Hong Kong SAR Government released a proposal for the regulation of Critical Infrastructure Operators (CIOs) and Critical Computer Systems (CCS) (Proposed Framework) for consultation.

The acceleration of the rate of cyber-attacks against companies in Hong Kong in the last year or so (with over 60 notifications of such attacks being received by the Office of the Privacy Commissioner...