Skip to content

Activists and protest digital safety

Digital preparation for protests and mobilization, what to bring, what to leave at home, how to handle your phone if you are detained, is one of the best-covered topics in English-language digital safety, and the canonical guide is already translated into the region's major languages.

We point outward on this one

EFF's Attending a Protest is the reference we use, available in Thai, Vietnamese, and Burmese among other languages. The Digital First Aid Kit and Security in a Box cover the same ground with regional translations. We don't reproduce that work; this page is the regional delta.

The Asia-Pacific delta

A few things the general guides under-weight for this region:

  • Real-name SIM registration. Across most of the region the SIM in your phone is tied to your legal identity, so "burner" expectations from other contexts don't hold. A cheap second handset with a prepaid SIM still carries a registered identity in many jurisdictions.
  • Device search at borders and checkpoints. For cross-border organizers the device-search risk is often higher leaving or entering than at the event itself. See the cross-border travel guide.
  • Network-level observation. Deep packet inspection and lawful-intercept tooling documented in the region (see the Regional Observatory) means network surveillance belongs in the threat model, not just on-the-ground policing.
  • Coordination metadata. Group-chat membership is itself sensitive: who is in the room, who joined when. Content encryption alone does not cover it. See anonymity, privacy, pseudonymity, and confidentiality.

Hong Kong: a sharper risk tier

Everything in the delta above still applies, but Hong Kong sits in a different risk category, not just a stricter version of the same one. Since the 2020 National Security Law and the 2024 Safeguarding National Security Ordinance (the Article 23 legislation), the maximum sentence for sedition alone rose from 2 years to 7, and to 10 with a foreign element. National-security police can seize a device under warrant, and a decryption obligation in force since March 2026 compels a person under national-security investigation to hand over device passwords, with up to a year's imprisonment for refusal (see the Hong Kong entry in our VPN risks and choices guide for the fuller legal picture). Assembly participation, group-chat membership, and ordinary device content can all become evidence in a national-security case, a different order of consequence than the fine-based public-order enforcement common elsewhere in the delta above.

Local organizations that once absorbed this kind of risk, the Civil Human Rights Front and the Hong Kong Confederation of Trade Unions among them, dissolved under pressure in 2021. Treat "there's a local group that handles this" as no longer reliably true, and route to international organizations instead: Reporters Without Borders, the Committee to Protect Journalists, the Access Now Digital Security Helpline (24/7, multilingual), and Citizen Lab for device forensics.

Where to go from here