HKCNSA Attends PCPD Seminar on the New Critical Infrastructure Ordinance and Data Security

On 5 February 2026, the Office of the Privacy Commissioner for Personal Data (PCPD) hosted the seminar “Understanding the Protection of Critical Infrastructures (Computer Systems) Ordinance and Data Security”, marking the first event of PCPD’s 30th anniversary programme series. The seminar followed the commencement of the Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653) on 1 January 2026 and attracted over 550 participants, reflecting strong industry interest in the new regulatory landscape.

The seminar featured presentations by Mr. Victor Chan, Commissioner for Critical Infrastructure (Computer Systems Security), who provided an overview of the Ordinance, outlining key statutory obligations imposed on designated critical infrastructure operators. Privacy Commissioner Ms. Ada Chung also shared real data breach cases and offered practical recommendations on preventing and responding to data breach incidents. Participants were introduced to actionable strategies for strengthening organisational cybersecurity, including system security planning, risk assessments, and incident response arrangements.

(From left to right) Mr. David Ip, Founding Chairman of the HKCNSA、Ms. Ada Chung,

Privacy Commissioner、Mr. Victor Chan, Commissioner for Critical Infrastructure (Computer Systems Security)

Mr. David Ip, Founding Chairman of the Hong Kong China Network Security Association (HKCNSA), was invited to attend the seminar. During exchanges with attendees, he discussed the practical implications of the new Ordinance for organisations, highlighting the importance of enhancing governance structures, cybersecurity capabilities, and data breach handling procedures. He also shared HKCNSA’s observations on industry challenges related to critical infrastructure protection and supply chain security, encouraging cross-sector collaboration to strengthen Hong Kong’s overall cyber resilience.

Looking ahead, HKCNSA will continue supporting the industry’s understanding and implementation of the Ordinance’s requirements. The Association remains committed to fostering dialogue between government, regulators, and enterprises, promoting best practices in cybersecurity and data protection, and contributing to Hong Kong’s long‑term digital resilience.