Hong Kong SFC Steps Up Fintech Regulation to Tackle AI Cybersecurity Risks

At the Hong Kong FinTech Week 2026, Julia Leung, CEO of the Securities and Futures Commission (SFC), outlined a proactive regulatory agenda to address the challenges posed by rapid artificial intelligence adoption. She emphasized that the expanding use of AI in finance brings sophisticated new cyber threats that demand a robust response.

Mandatory Cybersecurity Framework Targets High-Risk Firms

Leung announced that the SFC will develop and implement a mandatory cybersecurity framework for all licensed corporations. This move aims to systematically enhance the sector's resilience against advanced cyber attacks.

  • Risk-Based Approach: Requirements will be tiered, with firms deemed “higher-risk” facing more stringent standards based on their business activities, size, and risk profile.
  • Building Defenses: The core objective is to strengthen firms' capabilities to detect, prevent, and respond to automated, intelligent cyber threats powered by AI, which can outpace traditional security measures.
  • Ongoing Compliance: Licensed firms must establish processes for continuous threat assessment and system updates, ensuring defenses evolve alongside attack methodologies.

Principle-Based Guidelines for Advanced AI on the Horizon

Beyond cybersecurity, the SFC is focusing on the responsible use of AI within financial services. Leung revealed that the regulator will issue principle-based practical guidance for applications with a high degree of autonomy.

The guidance will seek to balance innovation with safety. Its foundational principles will be ensuring market integrity and safety as the top priority, and mandating that clear human accountability and effective oversight are maintained throughout the AI workflow to prevent opaque operations.

Tokenization Development: Real Economic Value Stressed

Discussing asset tokenization, Leung acknowledged Hong Kong's leading position but offered a note of caution. She stated that for tokenization to achieve scale, it must deliver tangible economic benefits to the market—such as enhanced liquidity, reduced costs, or new asset classes—rather than being pursued for technological novelty alone.

The SFC supports innovation that serves the real economy and investor interests, setting a pragmatic tone for the future of fintech in Hong Kong.