Hong Kong Joins Canada, US, Russia, UK, Australia, China, and More in Criminalizing Refusal to Provide Device Passwords Under National Security Laws, With Heavy Fines for Non-Compliance

Image generated with Ai

Hong Kong has now joined the ranks of countries like Canada, the US, Russia, the UK, Australia, and China by enacting a law that criminalizes the refusal to provide passwords for personal electronic devices under its National Security Law. This significant development means that travelers, residents, and anyone transiting through Hong Kong are now legally obligated to comply with authorities’ demands for access to their digital devices, including phones and laptops. The law empowers police to search, decrypt, and seize personal data, with heavy fines imposed for non-compliance, marking a sharp increase in digital border security. This move aims to strengthen Hong Kong’s national security enforcement but raises concerns over privacy and the rights of international travelers.

In a significant shift in global border security measures, Hong Kong has joined the ranks of several countries across the globe by introducing sweeping powers for border authorities to search and access personal electronic devices. Travelers to and from Hong Kong now face the possibility of having their digital devices, including mobile phones, laptops, and tablets, searched by border agents. The updated policies, which fall under the purview of the National Security Law, require travelers to provide passwords and assistance in decrypting devices when requested by the authorities.

This new policy aligns with similar laws and practices already in place in several other nations, including the United States, Canada, Russia, the United Kingdom, Australia, and China. As more countries tighten digital border security, travelers must be more cautious than ever when carrying personal data across borders. Let’s take a closer look at how these new regulations unfold, why they matter, and what travelers need to know about their rights and responsibilities.

Hong Kong’s National Security Law: A Landmark Change

Hong Kong’s National Security Law, which was enacted to prevent activities deemed harmful to national security, has been recently updated to include stringent digital surveillance measures. Under these changes, Hong Kong authorities have been granted sweeping powers to examine, decrypt, and seize personal electronic devices of anyone traveling through the region.

These new rules apply to all travelers entering Hong Kong, including residents, tourists, and transiting passengers. The changes, effective from March 26, 2026, stipulate that refusing to provide access to electronic devices, including passwords, could lead to hefty fines and potential legal penalties. These measures are part of a broader strategy to enhance national security, with Hong Kong claiming the rules will not disrupt business operations or the everyday lives of its citizens. However, travelers are encouraged to be aware of the significant implications these changes may have.

The penalties for non-compliance can be severe. Refusal to cooperate with authorities by providing access to electronic devices or passwords could result in fines up to HK$100,000 (approximately ₹12 lakh), while those found guilty of providing false information may face fines of up to HK$500,000 (roughly ₹60 lakh). Travelers who refuse to provide passwords or assistance with device decryption could also be detained, causing considerable delays in their travels.

Global Digital Border Security: Countries That Follow Suit

Hong Kong is far from the first country to implement such strict border checks on personal electronic devices. Several other countries have established similar laws and regulations, some with penalties that could affect travelers’ ability to freely move across international borders. Below is a comprehensive look at how other nations are implementing similar measures.

United States

• Search Powers: U.S. border agents, particularly those from Customs and Border Protection (CBP), have extensive authority to search travelers’ devices at the border. Under the border search exception doctrine, CBP can examine, copy, and retain digital information without a warrant.
• Password Demands: While the U.S. does not yet criminalize the refusal to provide passwords, individuals who do not cooperate may face seizure of their devices, prolonged questioning, or delays at the border. Travelers may also face entry denial if they are non-compliant or perceived as obstructing investigations.
• Penalties: Although the refusal to provide a password is not explicitly a criminal offense, it can still result in device retention and potential immigration consequences for non-citizens.

Canada

• Search Powers: Canada has broad authority to inspect personal electronic devices at border crossings. Border services officers can ask for passwords and inspect devices if they have reasonable suspicion of criminal activity.
• Password Demands: Travelers are expected to provide passwords or assist in decrypting devices if requested by Canadian authorities. Refusal can result in device seizure or delays in processing.
• Penalties: While Canadian law does not outright criminalize refusal to cooperate, the seizure of devices and delays in entry can be the consequence for those who do not comply.

United Kingdom

• Search Powers: The UK’s Terrorism Act empowers customs officials to search travelers’ electronic devices for security reasons. These checks can be part of counter-terrorism or national security measures.
• Password Demands: Authorities may request passwords to examine a device’s contents. Though refusal is not explicitly criminalized, non-compliance can lead to secondary questioning and delays at the border.
• Penalties: Travelers who refuse to unlock their devices may face extended detainment or even be denied entry, depending on the situation.

Australia

• Search Powers: Australia’s Customs and Border Protection agency has the right to inspect personal devices at entry points. Australian border officials can request passwords to access devices and inspect their contents.
• Password Demands: If a traveler refuses to provide a password, Australian authorities may detain the device or even deny entry until further inspection is carried out.
• Penalties: Refusal to cooperate could lead to delays, seizure of devices, or even fines, though it is not explicitly a criminal offense.

Russia

• Search Powers: Russian customs officers have the power to search personal devices under the Customs Union regulations, especially when there are suspicions related to national security or the carrying of restricted materials.
• Password Demands: Russian officials can demand access to personal devices, including passwords, for further examination during border checks.
• Penalties: Failure to comply with Russian border authorities may lead to device confiscation or denial of entry into the country.

China

• Search Powers: China’s border security agents are known for rigorous checks on electronic devices at international points of entry, including airports and train stations.
• Password Demands: Chinese authorities can ask for passwords and access to digital devices during customs checks, particularly if there is a national security concern.
• Penalties: Travelers who refuse to provide passwords or comply with requests for device inspection could face detainment, device seizure, or denial of entry into China.

Table: Summary of Digital Search Laws and Penalties Across Countries

What Travelers Need to Know

Travelers heading to countries like Hong Kong, Canada, Russia, the United States, and others with similar digital security laws must be prepared for the reality of digital device searches. These laws are part of broader national security efforts aimed at preventing digital threats, including terrorism, cybercrime, and unauthorized access to sensitive information.

While the extent of enforcement may vary from country to country, travelers should always keep in mind that refusing to provide passwords or assist authorities in device decryption can lead to serious consequences, including delays, fines, and, in some cases, denial of entry into the country.

It’s important to note that these laws apply not only to residents and citizens but also to tourists and transiting passengers, making it crucial for anyone crossing international borders to stay informed about each country’s specific regulations.

Hong Kong has joined countries like Canada, the US, Russia, the UK, Australia, and China in criminalizing the refusal to provide device passwords under national security laws, aiming to bolster digital security enforcement and prevent national security threats. Non-compliance now results in heavy fines.

As more countries adopt stricter border security laws that include digital device inspections and password demands, the landscape of international travel is evolving. Hong Kong’s new regulations mark a significant step in the expansion of global digital security measures. By joining countries like the United States, Canada, Russia, Australia, and China, Hong Kong is setting a precedent for enhanced border controls, emphasizing the growing importance of securing national borders against digital threats. For travelers, this means understanding their rights, responsibilities, and the potential consequences of failing to comply with these new rules.