HKMA issues Code of Practice for designated retail payment system infrastructure operators
The HKMA has issued a Code of Practice under Hong Kong's Protection of Critical Infrastructures (Computer Systems) Ordinance for retail payment system infrastructure operators that it designates as critical infrastructure operators. This short segment covers what the Code binds, the statutory obligations it addresses, and the effective date operators need to work back from.
- The Code is issued under section 8(1) of the Protection of Critical Infrastructures (Computer Systems) Ordinance (Chapter 653).
- It applies to Retail Payment System Infrastructure Operators designated by the Monetary Authority as Critical Infrastructure Operators under section 12 of the Ordinance.
- The Code provides practical guidance on compliance with category 1 and category 2 obligations under the Ordinance.
- Under section 8(3), the Code takes effect on 15 October 2026.