Following is a question by Professor the Hon Michael Ngai and a written reply by the Secretary for Innovation, Technology and Industry, Professor Sun Dong, in the Legislative Council today (November 11):

Question:

     The Hong Kong Internet Registration Corporation Limited (HKIRC) completed the Survey on AI Adoption and Security Trends in the Workplace of Hong Kong Enterprises this year, covering 806 organisations across various industries and of different sizes. The findings revealed that 94 per cent of the responding organisations have already applied AI in their work, but 63 per cent of the responding organisations have yet to formulate an AI policy, 68 per cent have not arranged AI training, and 49 per cent of the employees in the surveyed organisations have used unauthorised AI tools. The Digital Policy Office, in collaboration with the HKIRC, launched the "Secure AI@Work Enablement Campaign" (the Campaign) in June this year to assist small and medium-sized enterprises as well as public and private organisations in applying AI more safely in their workplace. In this connection, will the Government inform this Council:

(1) since the launch of the Campaign, of the number of organisations that have selected suitable AI policy templates by using the "AI Strategy and Policy Generator", so as to support organisations in adopting AI tools in a safe, responsible manner and within the governance framework;

(2) of the ceiling on the number of places for the free one-on-one consultancy service under the Campaign, as well as the respective numbers of places already taken up and remaining at present; the indicators used by the authorities to assess whether the existing training places under the Campaign are sufficient to cover all organisations in need, and whether regular reviews will be conducted; and

(3) of the channels through which the authorities will promote the application of AI and its security in the workplace among public and private organisations; how the authorities will follow up and assess the safe application of AI in the workplace by enterprises as well as public and private organisations on an ongoing basis?

Reply:

President, 

     AI is increasingly being integrated into the daily operations of enterprises and organisations in Hong Kong, bringing opportunities to enhance operational efficiency, optimise services, and drive innovation. To help small and medium-sized enterprises (SMEs), schools, non-governmental organisations, and public organisations adopt AI in a more secure and responsible manner, the Digital Policy Office (DPO), in collaboration with the Hong Kong Internet Registration Corporation Limited (HKIRC), launched the "Secure AI@Work Enablement Campaign" (the Campaign) in mid-2026 to assist organisations in establishing AI strategies, codes of practice, risk management, and governance frameworks tailored to their specific needs.

     The reply to the question raised by Professor the Hon Michael Ngai is as follows:

(1) and (2) As of October 2026, around 14 000 participants had taken part in the free training courses of the Campaign. The courses are offered online without quota. The training courses allow organisations of various sizes and from different sectors, as well as their staff, to participate flexibly according to their needs, thereby enhancing their capabilities in adopting AI in a secure and responsible manner.

     The Campaign also provides a free online tool, namely the "AI Strategy and Policy Generator". By answering relevant questions, organisations can obtain AI strategy and policy templates tailored to their needs so as to support organisations in formulating appropriate AI usage policies, prescribing guidelines on staff usage of AI tools, and strengthening the management of information security and related risks. Around 1 200 AI policy templates have been generated under the Campaign so far.

     In addition, the Campaign offers 150 quotas for free one-on-one advisory services. Upon completing the training and using the "AI Strategy and Policy Generator", participants may apply for the advisory services based on their actual needs. The advisory services aim to provide relevant assistance tailored to their organisational needs after they have completed the training and drafted the preliminary AI strategies and policies. As of October 2026, around 30 applications have been approved under the Campaign.

The DPO will continue to work closely with the HKIRC to monitor the implementation progress of the Campaign and the service demands of organisations, and will review and refine the service arrangements in a timely manner as appropriate, having regard to actual circumstances.

(3) To enable various organisations and enterprises to apply AI safely and orderly, the DPO has formulated the Ethical Artificial Intelligence Framework and the Hong Kong Generative Artificial Intelligence Technical and Application Guideline. These documents provide clear guidance for projects that develop and utilise AI technology, helping identify and effectively manage the potential risks and matters requiring attention associated with such AI projects. 

     According to the AI development and risk‑governance strategy outlined in the 2026 Policy Address, the DPO will reach out to industry bodies to drive the industry‑led development of sector‑specific AI application guidelines, accreditation and governance frameworks, and to provide professional advice and support. In 2027, the DPO will promulgate, in collaboration with the Hong Kong Artificial Intelligence Research and Development Institute, AI Agent safety‑management guidelines applicable to society at large to raise the overall level of AI safety in Hong Kong. 

     On the other hand, the Government will launch the Digital Transformation Support Pilot Programme 2.0 by end of this year to assist SMEs in applying off-the-shelf basic AI digital solutions to enhance operational efficiency and market competitiveness. All AI solutions proposed for inclusion in the solution catalogue must comply with standards on data processing, cybersecurity and related requirements. They are subject to strict vetting and approval by an independent vetting committee before being listed so as to guard against data privacy and information security risks.  

     In addition to the measures mentioned above, promoting the widespread adoption and enhancing AI literacy is key to inclusive AI development and enhancing digital and intelligent transformation. In July this year, the Government launched the "AI for All" Inclusive Programme, which is being implemented through collaboration with three organisations, namely Cyberport, the Hong Kong Science and Technology Parks Corporation (HKSTPC), and the Hong Kong Productivity Council (HKPC). Through activities such as training courses, exhibitions, competitions, seminars, and thematic forums, these organisations will provide training and support tailored to various AI application scenarios, thereby raising awareness across all sectors of society about the safe use of AI.  

     In addition, the HKPC assists enterprises in addressing the security challenges posed by AI, providing services such as AI governance and security testing, AI governance framework design, ethical and compliance reviews, data privacy assessments, as well as AI agent and model penetration testing. Cyberport helps enterprises adopt AI responsibly through strategic leadership training and hands-on, industry-focused courses. The HKSTPC will support and co-organise seminars or symposiums on responsible AI, AI cybersecurity, etc, to raise privacy risk awareness among SMEs.

Ends/Wednesday, November 11, 2026
Issued at HKT 15:00

NNNN