Hong Kong’s eMPF nears full rollout, MPFA emphasizes data security

The digital platform for Hong Kong’s Mandatory Provident Fund Schemes, eMPF, prioritizes user privacy and data security and is designed to meet information security requirements, the chair of the MPF Authority said, following public concerns over potential personal data leaks.

"All critical data on the platform, including personal information, is protected by multiple layers of encryption," chairwoman Ayesha Macpherson Lau said in her blog. " The project team regularly engages independent third parties to conduct risk assessments and audit checks."

She said that the eMPF is equipped with a 24-hour network-monitoring system to detect and block cyberattacks in real time, while contingency infrastructure and backup data are in place to restore operations as quickly as possible in the event of an emergency.

In addition to system-level security measures, the eMPF enforces stringent protocols for the protection of personal data, including defined access controls and supervisory arrangements, she highlighte

Lau also said the platform is entering the final stage of its onboarding schedule, with the 10th trustee set to join this Friday and the remaining two expected in November and December.

To ensure stable operation, Lau added that the project team adopted a phased onboarding strategy, bringing trustees with smaller MPF assets on board first, followed gradually by those with larger assets. This approach helps reduce system load and gives the team time to monitor performance and make any necessary adjustments, she noted.