Navigating Hong Kong's new era of cyber & AI governance

How SailPoint drives innovation and helps compliance readiness

Hong Kong’s regulatory environment is undergoing a rapid transformation. Two developments stand out. The first is the Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653), which took effect on January 1, 2026, along with its Code of Practice. The second is the Office of the Privacy Commissioner for Personal Data (PCPD)’s Artificial Intelligence: Model Personal Data Protection Framework, reinforced by a March 2026 alert on the privacy and security risks of agentic AI.

Together, these create significant pressure for critical infrastructure operators and enterprises adopting AI. They face annual security risk assessments, tight incident reporting timelines, and the new challenge of governing autonomous AI agents that can operate with broad access and limited human oversight.

This white paper outlines the core themes of these frameworks and the identity-related challenges they raise. It then shows how SailPoint’s identity security platform and the SailPoint Agentic Fabric can help organizations enhance visibility, enforce least privilege, automate identity lifecycles, govern non-human identities, and improve audit readiness for measurable ROI.

FILL THE FORM BELOW









    By submitting this content request, I have legitimate interest in the content and agree that SailPoint, their partners, and the creators of any other content I have selected may contact me regarding news, products, and services that may be of interest to me.




    © An Imprint of coreinteltech | All rights reserved | Privacy Policy