IS5542 Chap.13 Regulating AI in Mainland China and Hong Kong
Regulating AI in Mainland China and Hong Kong
Four philosophies and a fifth position
The legal lecture places the EU as rights-based and risk-tiered, the United States as sectoral and agency-driven, the Mainland as administrative and focused on content safety, and the UK as pro-innovation and regulator-led, with Hong Kong applying common law, its privacy ordinance and soft law.
The same product can meet very different rules in each.
The Mainland's layered measures
Rather than one statute, the Mainland has built rules in layers: cybersecurity, data security and personal information laws, then measures for recommendation algorithms, deep synthesis and generative AI.
The generative AI measures reach offshore providers, require lawful training data, set content standards, require algorithm filing for services with public-opinion attributes and make providers responsible for generated content.
Hong Kong's approach
Hong Kong has no dedicated AI statute.
Its privacy commissioner's 2024 AI framework is guidance built on the 1995 ordinance's data protection principles, sector regulators add guidance for banking, virtual assets and hospitals, and enforcement relies on notices and prosecution rather than administrative fines.
Crossing the boundary
Hong Kong firms often handle Mainland-related data, and Mainland transfer rules follow the data subject rather than the server.
A Greater Bay Area pilot eases some flows, and the lecture advises designing for both regimes.
What to carry into an essay
State for each obligation whether it is binding law, a regulation or guidance, and which jurisdiction it belongs to. Most weak answers on this topic describe Hong Kong guidance as if it were enforceable, or Mainland measures as if they applied only to Mainland companies.
What this chapter covers
- 01
Five regulatory positions compared
- 02
Mainland data and network laws
- 03
Recommendation and deep synthesis rules
- 04
Generative AI measures and algorithm filing
- 05
The EU AI Act's risk tiers
- 06
Hong Kong's privacy ordinance and AI framework
- 07
Sector guidance in Hong Kong
- 08
Cross-boundary data transfers
Worked example · free
Compare two launches of the same chatbot
- 3State the Hong Kong position.
- 4State the Mainland requirements.
- 2Say how to design for both.
Key terms
- Algorithm Filing
- The Mainland requirement to register certain recommendation and generative algorithms with the regulator.
- Deep Synthesis
- Synthetic media such as deepfakes, regulated in the Mainland with watermarking and identity verification duties.
- Soft Law
- Non-binding guidance that is persuasive rather than enforceable, such as Hong Kong's 2024 AI privacy framework.
- Data Protection Principle
- One of the six principles of Hong Kong's privacy ordinance governing collection, accuracy, use, security, openness and access.
- Risk Tier
- A level in the EU AI Act's classification of systems as unacceptable, high, limited or minimal risk.
Regulating AI in Mainland China and Hong Kong FAQ
Does Hong Kong have an AI law?
Not a dedicated one. AI in Hong Kong is governed by existing common law and statutes, above all the 1995 privacy ordinance, together with the privacy commissioner's non-binding 2024 framework and sector guidance from bodies such as the banking regulator. The lecture notes that reform towards a GDPR-style regime is under consultation.
Why must a Hong Kong company care about Mainland data rules?
Because Mainland rules follow the person whose data it is. A model trained or run in Hong Kong on data from Mainland users can trigger Mainland cross-border requirements such as a security assessment or approved contract clauses, even though the servers are outside the Mainland, so many firms face both regimes at once.
What must a generative AI service in the Mainland do before and after launch?
Ensure its training data is lawfully sourced and respects intellectual property, keep outputs within the content standards, take responsibility for what the system generates, and, if it has public-opinion attributes or can mobilise people, file its algorithm with the regulator within ten working days of launch.
Exam move
Draw the regulatory map from memory with five positions, then list the Mainland instruments in date order with one obligation each. Finish by writing a three-row comparison of Hong Kong and the Mainland on legislation, enforcement and algorithm filing.
Working through Regulating AI in Mainland China and Hong Kong in IS5542? Sia is AskSia’s AI Information Technology tutor — ask any IS5542 Regulating AI in Mainland China and Hong Kong question and get a clear, step-by-step explanation grounded in how IS5542 is taught and assessed. Read this chapter free, then take your hardest questions to Sia.
