HKMA issues Code of Practice for designated retail payment system infrastructure operators
The HKMA has issued a Code of Practice under Hong Kong's Protection of Critical Infrastructures (Computer Systems) Ordinance for retail payment system infrastructure operators that it designates as critical infrastructure operators. This short segment covers what the Code binds, the statutory obligations it addresses, and the effective date operators need to work back from.
- The Code is issued under section 8(1) of the Protection of Critical Infrastructures (Computer Systems) Ordinance (Chapter 653).
- It applies to Retail Payment System Infrastructure Operators designated by the Monetary Authority as Critical Infrastructure Operators under section 12 of the Ordinance.
- The Code provides practical guidance on compliance with category 1 and category 2 obligations under the Ordinance.
- Under section 8(3), the Code takes effect on 15 October 2026.
Executive summary
The Hong Kong Monetary Authority has issued, pursuant to section 8(1) of the Protection of Critical Infrastructures (Computer Systems) Ordinance (Chapter 653), a Code of Practice entitled "Code of Practice pursuant to the Protection of Critical Infrastructures (Computer Systems) Ordinance…
The executive summary, the full reported briefing, the analysis and the counterpoint are for subscribers — as is the audio.
You are not charged for 3 days and you can cancel at any time. Already subscribe? Sign in to hear this and everything else published today.
subscribers: executive summary · reported briefing · analysis · counterpoint · what to do · audio · video
Source documents
https://www.hkma.gov.hk/media/eng/regulatory-resources/regulatory-guides/svf-and-rps/stored-value-facilities-and-retail-payment-systems/Sectoral_CoP_for_RPSI_Operators_Notice_en_20261015.pdfRead by Regulus 19 Oct 2026 at 04:56 UTC
9 factual claims checked against this document · 0 unsupported
Cited and linked; extract quoted under fair dealing