Hong Kong has appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments.

It is reported that the Office of the Communications Authority (OFCA), the executive authority for the supervision and administration of services in the telecommunications sector, is independent from the government in the decision-making process.

Section 374 of the Companies Ordinance requires a company to maintain its accounting records either at its registered office or at another location determined by the directors, ensuring that they remain accessible to the directors at all times without charge. Where such records are kept outside Hong Kong, the corresponding accounts and returns relating to the business concerned must be sent to, and preserved at, a place within Hong Kong for the same purpose. Under section 2, company refers to an entity formed and registered under the Ordinance, an existing company, or a re‑domiciled company.

Hong Kong’s Securities and Futures Commission released a circular in October 2019 that requires banks and other regulated groups to store data locally or ensure that their cloud provider will hand over information on request.

Hong Kong has joined an agreement with binding commitments to open transfers of data across borders: the Australia - Hong Kong Free Trade Agreement and associated Investment Agreement [Art. 11.7(2) and 11.15(1)].

The Personal Data (Privacy) Ordinance, as amended in 2012 (the PDPO), is the main legislation in Hong Kong which aims to protect the privacy of individuals in relation to personal data and to regulate the collection, holding, processing, or use of personal data based on a set of data protection principles (DPPs).

Pursuant to Art. 43 of the Law of the People's Republic of China on Safeguarding National Security in the Hong Kong Special Administrative Region (National Security Law), the Chief Executive may authorise the interception of communications or the covert surveillance of an individual if they think it is necessary and proportionate to the purpose for which such actions are sought. As a result, it is reported that the Law allows the government to request sensitive data if national security is deemed at risk, and that such authorisations are not legally reviewable. The National Security Law is implemented through the Implementation Rules for Art. 43 of the Law of the People’s Republic of China on Safeguarding National Security in the Hong Kong Special Administrative Region.

The Copyright Ordinance establishes a safe-harbour regime for intermediaries in relation to online copyright infringement. This regime was introduced by the Copyright (Amendment) Ordinance 2022, which inserted Division IIIA, which sets out limitations on the liability of service providers for infringements occurring through their services. Where the statutory conditions are satisfied, the safe harbour limits the remedies available against service providers, in particular by restricting monetary damages, and it is complemented by a statutory notice mechanism, including a notice-and-counter-notice procedure.

A basic legal framework on intermediary liability beyond copyright infringement is absent in Hong Kong's law and jurisprudence. On 31 October 2019, the High Court handed down an interim injunction against the "promotion, encouragement and incitement of the use or threat of violence via Internet-based platform or medium". Subsequently, the High Court amended its injunction to restrain only those who willfully assist others in posting inciting material online. In other words, online service providers (OSPs) are not in breach of the injunction, even if they enable posts to be made on their platforms without knowing the facts or contents of such publications. Furthermore, the injunction does not impose a positive duty on OSPs to search for or filter out unlawful content uploaded by others.

The Telecommunications (Registration of SIM Cards) Regulation came into effect in September 2021 to implement the Real-name Registration Programme for Subscriber Identification Module (SIM) Cards. According to Art. 5 of the Regulation, telecommunications operators must not activate SIM cards unless users have registered their personal data, including their full name in English and Chinese, HKID number or other identity document number, a copy of their identity document and date of birth.

Copyright is not adequately enforced online in Hong Kong. Piracy through illicit streaming devices (ISDs) is reportedly on the rise in Hong Kong, posing a direct threat to content creators, sports leagues and live performances, as well as legitimate providers of streaming, on-demand and over-the-top media services. In addition, Hong Kong's failure to modernise its copyright system has left it vulnerable to digital copyright piracy, particularly from illicit streaming websites and streaming devices (ISDs), with negative ramifications for businesses and innovators.

Hong Kong has ratified the World Intellectual Property Organization (WIPO) Copyright Treaty.

Hong Kong has ratified the World Intellectual Property Organization (WIPO) Performances and Phonograms Treaty.