Overview

• The Office of the Privacy Commissioner for Personal Data has launched a criminal investigation under personal data laws into an HKU law student’s alleged AI-generated explicit images of at least 20 women.
• Chief Executive John Lee has pledged to study global AI regulatory frameworks and best practices to close legal gaps exposed by the deepfake scandal.
• Current Hong Kong legislation criminalizes only the distribution of intimate images without consent and does not cover the creation of AI-generated deepfake pornography.
• The University of Hong Kong drew criticism for issuing just a warning letter and apology demand to the unnamed student and is conducting an internal review for further disciplinary action.
• Victims and women’s rights groups warn that non-consensual AI pornography may be widespread and are urging lawmakers to criminalize deepfake creation and strengthen protections for intimate imagery.