Unlock Your Phone or Go to Jail: Hong Kong's Alarming New Digital Law Targets Everyone — Including Tourists

.

Beijing's tightening grip on Hong Kong has reached a new milestone: refusing to hand your phone password to police is now a criminal offense — and it applies to every visitor, transit passenger, and foreign national who sets foot in the city.

If you are planning to travel through Hong Kong — even just changing planes at its international airport — there is something you need to know before you board: police now have the legal authority to demand the password to your phone or laptop. And if you refuse, you could be arrested on the spot.

This is not a hypothetical scenario. It is the law as of March 23, 2026.

What the New Law Actually Says

Hong Kong's city government gazetted amendments to the implementation rules of the Beijing-imposed 2020 National Security Law, granting police the power to require anyone suspected of violating the law to hand over passwords to their mobile phones or computers.

Refusing to comply could lead to up to one year in jail and a fine of up to HK$100,000 (approximately US$12,773). Providing false or misleading information carries even harsher penalties — up to three years in prison and a maximum fine of HK$500,000.

The scope of who is affected is sweeping. The updated rules apply to everyone in Hong Kong — residents, visitors, and travelers passing through the airport — making it illegal to refuse police requests for passwords or decryption assistance. Authorities have also expanded their powers to take and keep personal electronic devices as evidence if they claim the devices are linked to national security offenses.

The new amendments also empower customs officers to seize items deemed to have "seditious intention," regardless of whether any person has been arrested for an offense endangering national security because of those items.

The U.S. Government Raises the Alarm

Washington responded swiftly. The U.S. Consulate General in Hong Kong and Macau issued a security alert on March 26, warning that it is now a criminal offense to refuse to give Hong Kong police passwords or decryption assistance to access personal electronic devices, including cellphones and laptops. The consulate stressed that this legal change applies to everyone — including U.S. citizens in Hong Kong, those arriving, and even those merely transiting through Hong Kong International Airport.

Similar warnings have been issued by the governments of the United Kingdom and Canada, who are highlighting the risk of being detained or even removed to mainland China for offenses related to the National Security Law.

The U.S. State Department had already elevated its advisory for Hong Kong to "exercise increased caution" since November 2024, citing risks from arbitrary enforcement of local laws. The new digital password rule has added an urgent new dimension to that warning.

Legal Experts: This Violates Fundamental Rights

Urania Chiu, a law lecturer in the UK researching Hong Kong, said the new provisions interfere with fundamental liberties, including the privacy of communication and the right to a fair trial. She described the sweeping powers given to law enforcement officers — without any need for judicial authorization — as "grossly disproportionate to any legitimate aim the bylaw purports to achieve."

The Hong Kong government has defended the changes, insisting they conform to the city's mini-constitution and its human rights provisions, and that they "will not affect the lives of the general public." But for international travelers and business visitors, the reassurance rings hollow.

A City Transformed Beyond Recognition

The password law is just the latest chapter in Hong Kong's rapid transformation since Beijing imposed the National Security Law in 2020 — a move that promised to restore stability but has instead systematically dismantled the freedoms that once made the city one of Asia's most open and dynamic societies.

From 2020 to 2026, at least 385 individuals have been arrested and 175 convicted under national security-related offenses. The legislation criminalizes speech or actions deemed secessionist, subversive, terrorist, or colluding with foreign forces — with punishments as severe as life imprisonment.

The most high-profile case to date is that of Jimmy Lai, the 78-year-old founder of the now-shuttered Apple Daily newspaper. Lai was sentenced to 20 years in prison on February 9, 2026 — the harshest sentence ever handed down under the National Security Law — following his conviction on two counts of conspiracy to collude with foreign forces and one count of conspiracy to publish seditious publications.

Lai's prosecution was marred by serious violations of fair trial rights, including being tried by judges handpicked by the Hong Kong government, being denied a jury trial, facing prolonged pretrial detention, and being barred from having counsel of his choice. He has been held in prolonged solitary confinement since December 2020 and suffers from serious health problems including diabetes, heart palpitations, and significant physical decline.

Amnesty International called the sentence "a cold-blooded attack on freedom of expression that epitomizes the systematic dismantling of rights that once defined Hong Kong," describing Lai as a prisoner of conscience who should never have spent a single day behind bars.

The UN Human Rights Chief went further. "Jimmy Lai is a publisher sentenced to 20 years in prison for exercising rights protected under international law," he stated, calling on Hong Kong authorities to immediately release those arbitrarily detained and to repeal or amend the legislation in line with international standards.

What Travelers Should Know

If you are traveling to or through Hong Kong, security experts now recommend a set of precautions often called "digital hygiene":

Travel with a clean or secondary device rather than your primary phone. Remove or log out of sensitive apps before arrival. Be aware that any device authorities seize can be retained as evidence indefinitely. And if you are detained, contact the U.S. Consulate General in Hong Kong immediately.

One thing is beyond dispute: the Hong Kong that Beijing promised the world in 1997 — a free, open city governed under "one country, two systems" for fifty years — is vanishing. What is taking its shape is something very different.

.

Sources:

• U.S. Consulate General Hong Kong & Macau – Official Security Alert (March 26, 2026): https://hk.usconsulate.gov/security-alert-2026032601/
• Al Jazeera – Hong Kong Grants Police Power to Demand Phone Passwords: https://www.aljazeera.com/news/2026/3/24/hong-kong-grants-police-power-to-demand-phone-and-computer-passwords
• Hong Kong Free Press – Hong Kong Introduces Password Surrender Requirement: https://hongkongfp.com/2026/03/23/hong-kong-introduces-offence-requiring-national-security-suspects-to-hand-over-passwords/
• Newsweek – US Tourists Warned They Must Give Over Phone and Computer Passwords: https://www.newsweek.com/us-tourists-warned-must-give-phone-computer-passwords-11744906
• Japan Times – Hong Kong Police Given New Powers to Obtain Passwords: https://www.japantimes.co.jp/news/2026/03/24/asia-pacific/politics/hong-kong-police-phone-computer-passwords/
• Human Rights Watch – Hong Kong Publisher Jimmy Lai Sentenced to 20 Years: https://www.hrw.org/news/2026/02/09/hong-kong-publisher-jimmy-lai-sentenced-to-20-years
• Amnesty International – Jimmy Lai Sentence "A Cold-Blooded Attack on Freedom of Expression": https://www.amnesty.org/en/latest/news/2026/02/hong-kong-jimmy-lai-jail-sentence-a-cold-blooded-attack-on-freedom-of-expression/
• UN Human Rights Office – Türk Urges Release of Jimmy Lai: https://www.ohchr.org/en/press-releases/2026/02/hong-kong-sar-turk-urges-release-jimmy-lai-following-imposition-20-year
• CNN – Jimmy Lai Sentenced to 20 Years in Prison: https://www.cnn.com/2026/02/08/china/jimmy-lai-sentenced-20-years-intl-hnk

.