The Protection of Critical Infrastructures (Computer Systems) Ordinance will come into effect on January 1 of next year, in accordance with a notice published today in the Government Gazette. 

The ordinance imposes statutory obligations on designated operators of critical infrastructure to ensure they adopt appropriate measures to protect their computer systems.

The aim is to minimise the risk of essential services being disrupted or compromised due to cyberattacks, thereby maintaining the normal functioning of Hong Kong society and people’s daily lives.

The Protection of Critical Infrastructures (Computer Systems) Ordinance (Commencement) Notice will be tabled at the Legislative Council on July 2 for negative vetting.