Hong Kong introduces new legal amendments to outlaw doxxing
- The changes are part of the government’s long-expected plan to rein in cyber harassment common during the 2019 anti-government protests
- Under the proposal, disclosing someone’s personal data without their consent ‘with an intent to threaten, intimidate or harass’ will constitute an offence
Failure to comply should be a criminal offence, the bureau said.
Woman found guilty under sedition law jailed for three years in doxxing case
Amid that highly polarised climate, protesters, journalists and especially police officers and their supporters were commonly targeted for doxxing. The situation prompted the secretary for justice at the time to apply to the court for an injunction order to protect police officers and their family members from the practice.
Under the government’s latest proposal, disclosing another person’s personal data without their consent “with an intent to threaten, intimidate or harass” them or their immediate family – or “being reckless” in such a way as to produce the same effect – will constitute an offence.
Releasing others’ data “with the intent to cause psychological harm” will also be included under the new proposed crime.
Carrie Lam vows to introduce amendments combating doxxing, fake news
Those found guilty would face jail time of up to five years and a fine of HK$1 million if tried on indictment, or a prison term of up to two years and a fine of HK$100,000 for a summary conviction.
The Constitutional and Mainland Affairs Bureau also proposed empowering the city’s privacy watchdog to request relevant information from individuals and require them to submit to questioning when it had reasonable grounds to believe a doxxing offence had been committed.
Anyone who refused to comply without a reasonable excuse, or who deliberately provided false or misleading details, would also be guilty of an offence.
The government also suggested allowing the privacy office to apply for search warrants and bring prosecutions in its own name.
Hong Kong police broke privacy law with public display of ID card: inquiry
“Conferring the [Privacy] Commissioner with additional criminal investigation power can effectively expedite the processing of doxxing cases,” the bureau said.
“With the advancement of technology, doxxing contents can be spread and reposted in a click, causing harm to the data subjects or their immediate family members,” it added. “It is therefore necessary to remove the information unlawfully disclosed in an expeditious manner.”
To that end, the privacy watchdog should be given the power to order any person in Hong Kong to “rectify” doxxing content online, the bureau said. While that person would be allowed to appeal against the watchdog’s request, he or she would have to comply with the notice while awaiting the outcome of the challenge.
The bureau said it aimed to finish drafting the amendments and submit a bill to Legco within this legislative year.
Doxxing cases plunge in Hong Kong after social unrest dies down
Between June 2019 and April 2021, the Office of the Privacy Commissioner received complaints about or uncovered over 5,700 doxxing-related incidents, according to the Legco document. The office had written to 18 operators of websites and social media platforms on at least 297 occasions to request the removal of 5,905 hyperlinks, about 70 per cent of which were ultimately removed.
During the same period, the privacy commissioner’s office referred more than 1,460 cases to police for criminal investigation. A total of 17 people were arrested, two of whom have since been convicted.
A further 60 cases were referred to the Department of Justice for suspected breaches of the court’s 2019 injunction protecting police officers.
