Introduction
The financial services sector in Hong Kong is being urged to adopt a dual-track approach to leverage the advantages of artificial intelligence (AI) while addressing the associated risks. This strategy focuses on enhancing efficiency and competitiveness, recognizing AI as a complementary tool to human analysis. Key areas of concern include cybersecurity, data privacy [1] [2] [4], and intellectual property rights [1] [2] [4].
Description
The financial services sector in Hong Kong is encouraged to adopt a dual-track approach to harness the benefits of artificial intelligence (AI) while addressing associated risks, particularly in cybersecurity [4], data privacy [1] [2] [4], and intellectual property rights [1] [2] [4]. This strategy aims to enhance efficiency and competitiveness within the industry, recognizing AI as a tool that complements human analysis rather than replaces it [1]. AI technologies can significantly improve investment decision-making through enhanced automation in research, data analysis [2] [4], and risk assessment [2] [4], while also optimizing investment strategies and facilitating the execution of repetitive tasks. This leads to improved accuracy and allows financial professionals to focus on more complex activities such as supervision and quality assurance [4].
Furthermore, AI’s capabilities in identifying patterns and anomalies in financial transactions can bolster fraud detection and prevention efforts [2], addressing concerns related to social engineering attacks and cybercrime. Virtual assistants and chatbots powered by AI can provide continuous customer service [2], while automating routine tasks allows financial professionals to concentrate on strategic initiatives.
However, responsible AI usage necessitates a strong emphasis on data privacy, intellectual property rights [1] [2] [4], information security [2], accountability [2] [5] [6], operational resilience [2], and job security [2]. Financial institutions are advised to establish a comprehensive AI governance strategy that incorporates a risk-based approach throughout the AI lifecycle [2], ensuring human oversight to mitigate potential risks [2] [3]. The Securities and Futures Commission (SFC) has outlined four core principles for AI in investment advisory services: the necessity of senior management oversight, robust AI model risk management practices—including validation [6], end-to-end testing [6], and continuous performance monitoring—the importance of cybersecurity and data risk management, and the need for clear risk allocation with third-party AI providers, including seeking indemnities where feasible [5] [6]. These principles are mandatory and effective immediately [5], although licensed corporations may require time to adjust their policies accordingly [5].
The Hong Kong Monetary Authority (HKMA) has also issued guidelines mandating customer protection measures in the use of Generative AI, including options for customer opt-out and human intervention [6], as well as continuous monitoring of AI output to ensure quality and prevent harmful results [5]. To minimize bias and hallucination risks [4], it is essential to ensure that training datasets are balanced and representative [4]. Institutions should also establish contingency plans to address potential disruptions in AI models and enhance AI detection systems to combat fraudulent activities. Continuous reskilling and upskilling of employees are vital to prevent job displacement [4], and industry cooperation is encouraged to share best practices and develop preventive measures [2].
Transparency in AI usage is crucial for protecting consumers and investors [2], particularly when AI influences business decisions [1] [2]. Clear disclosure allows stakeholders to make informed choices regarding their personal information and preferences [2]. The government plans to collaborate with financial regulators to create a comprehensive supervisory framework that adapts to the rapid evolution of AI [1] [2], drawing from international standards [2]. Recent initiatives include the Generative AI Sandbox launched by the HKMA and Cyberport [1] [2], which supports banks in exploring innovative AI applications within a risk-managed framework [1] [2]. The SFC has also issued guidance on Generative AI for licensed corporations [1] [2], emphasizing a risk-based approach that includes principles of AI model risk management [2], senior management oversight [1] [2] [5] [6], cybersecurity [1] [2] [4] [5] [6], and third-party provider risk management [1] [2].
Since 2018 [4], the Financial Services and the Treasury Bureau (FSTB) has included experienced professionals in Fintech in its Talent List and will continue to monitor industry demand while fostering the development of Fintech talent through various support measures, including training and subsidy programs [4]. In addition, the Hong Kong Government has issued a policy statement on the responsible application of AI in financial markets [3], reinforcing the need for financial institutions to develop a governance strategy for AI systems [3]. The government asserts that existing regulations and guidelines from financial regulators adequately address the risks associated with AI [3], and these regulators will continue to review and update regulations as necessary to remain aligned with advancements in AI and international standards. Moreover, the Hong Kong Police is actively collaborating with international organizations and law enforcement agencies to tackle the challenges posed by AI in the realm of cyber policing [3].
Conclusion
The dual-track approach to AI in Hong Kong’s financial services sector is designed to enhance industry efficiency and competitiveness while addressing critical risks. By implementing robust governance strategies and adhering to regulatory guidelines, financial institutions can leverage AI’s potential while safeguarding against associated threats. This approach not only supports innovation but also ensures consumer protection and aligns with international standards, ultimately fostering a secure and progressive financial environment.
References
[1] https://www.lexology.com/library/detail.aspx?g=4ea6e808-e033-4a85-9fb2-ceb60bd5fd2c
[2] https://www.jdsupra.com/legalnews/hong-kong-s-policy-statement-on-8872576/
[3] https://conventuslaw.com/report/hong-kong-policy-statement-on-responsible-application-of-artificial-intelligence-in-financial-market/
[4] https://www.clydeco.com/en/insights/2024/12/newsletter-on-policy-statement-on-responsible-appl
[5] https://www.lexology.com/library/detail.aspx?g=48b1a72f-5155-4599-97bf-c99405c3c7ef
[6] https://riskandcompliance.freshfields.com/post/102jrmt/hong-kong-financial-regulators-issue-rules-on-the-use-of-ai
