Speech by the Acting Commissioner for Digital Policy, Mr Daniel Cheung, JP, at the “AI Security & Governance Forum of 2026 World Internet Conference Asia-Pacific Summit” (with photos)

Chief Engineer Wu (Chief Engineer of the Cyberspace Administration of China, Mr Wu Dong (吳東)), Prof Wu (Academician of the Chinese Academy of Engineering, Prof Wu Jianping (吳建平)), distinguished guests, ladies and gentlemen,

It is my pleasure to share Hong Kong’s approach to artificial intelligence (AI) governance and cybersecurity at this forum.

The urgency of this discussion cannot be overstated. According to the “Hong Kong Cybersecurity Outlook 2026”, Hong Kong saw a record-high 15 877 cybersecurity incidents in 2025, representing a 27% increase year-on-year. As AI technologies proliferate, cyberattacks have become more automated and targeted, posing significant threats to business operations and information security.

In line with the National 15th Five-Year Plan, which emphasises balancing AI development with regulated use, the Hong Kong Special Administrative Region (HKSAR) Government is accelerating AI industrialisation while fostering a trusted ecosystem for safe applications.

Rather than stringent, one-size-fits-all regulation, we are establishing a risk-based, flexible governance framework. The Digital Policy Office has published and continuously updated the Ethical AI Framework and the Hong Kong Generative AI Technical and Application Guideline. These documents provide clear guidance on risk identification, require service providers to ensure lawful outputs, and remind users to exercise independent judgement when engaging with AI-generated information.

Recognising the cross-border nature of AI services, we will soon launch the Hong Kong Artificial Intelligence Research and Development Institute (AIRDI). The AIRDI will develop AI standards and promote interoperability by referencing the National Standard on AI Service Capability Maturity Evaluation and ISO 42001. It will provide safety assessments and compliance consulting services, enabling enterprises to train and test AI models in secure and standardised environments that meet international benchmarks. The AIRDI will also foster cross-sector and inter-regional collaboration on AI standardisation.

In response to AI-generated fraud and misinformation, the HKSAR Government is reviewing existing legislation to support wider and safer AI adoption, underscoring our commitment to balancing innovation with effective risk mitigation.

Besides, we are promoting “AI for All” by delivering AI safety knowledge through our Cyber Security Information Portal, and by organising courses, workshops and public activities to enhance digital literacy and encourage responsible AI use.

Strong cybersecurity forms the foundation of AI governance. Our cybersecurity policy is formulated on three pillars: protecting government digital infrastructure and information assets, building a secure and reliable cyberspace for Hong Kong’s digital economy, and raising public awareness.

To safeguard government systems, we have strengthened accountability, enhanced self-monitoring of bureaux and departments, and conducted regular vulnerability scanning, surprise checks and compliance audits.

To support small and medium enterprises, we provide free cybersecurity risk assessments and vulnerability identification services, while connecting them with quality service providers.

To raise awareness, which remains the first line of defense, we are developing comprehensive training programmes covering cybersecurity, data literacy and digital transformation in partnership with academic and professional institutions. Major information security forums are also hosted to facilitate cross-industry dialogue and collaboration.

Meanwhile, cybersecurity is a global challenge we must address with international co-operation. The Government Computer Emergency Response Team Hong Kong maintains close partnerships with regional and international computer emergency response teams and organisations. Through timely information exchange, joint incident response drills and global conferences, we work collectively to reduce vulnerabilities and respond swiftly to threats.

In closing, the HKSAR Government encourages the public and enterprises to embrace AI with confidence and security. We look forward to deepening exchanges with you at this forum, to build a secure, open and responsible AI ecosystem together. Thank you.

- ENDS -