Govt to restrict use of WhatsApp Web and cloud services by civil servants

Civil servants have to obtain authorization from department heads before using a range of cloud storage and instant messaging services -- including WhatsApp Web and WeChat -- after implementing the new Government Information Technology Security Policy and Guidelines.

The Guidelines, which were updated in April, noted that civil servants were restricted from using personal emails, public cloud storage, and web-based instant messaging services on office computers due to security concerns. 

Prior approval from the heads of departments is required for using the related applications, and the Guidelines also recommended setting up a web filtering function to prevent unauthorized use of the services.

Apart from internal communication, some government departments also make use of the relevant applications to communicate with citizens, such as the 1868 WhatsApp Assistance Hotline from the Immigration Department.

Leung Chau-Ting, the Federation of Civil Service Unions chairman, noted that the influence of the guidelines could be varied as some departments tend to use email for communication and some rely on Whatsapp.

Anthony Lai Cheuk-Tung, malware analyst and researcher, said there are similar regulations in the private sector, such as those of banks. However, the implementation of the guidelines will face challenges.

Lai suggested that the government explore a corporate version of the web-based instant messaging services or provide delicate devices to access the service.

In response, a Digital Policy Office spokesman explained that the revised guidelines have strengthened information security controls across different domains, raising the level of protection for government information systems. 

The spokesman further noted that all policy bureaus and departments must implement measures aligned with the updated guidelines within six months after the implementation of the new Guidelines.

It pledged to provide appropriate technical advice and support to ensure all government entities can effectively comply with the new requirements.