A layered framework, not a monolith

HKMA circulars since 2019 look like fragmentation until you read them as layers. Packs encode the layers.

Updated 19 August 2026. The original headline counted “nine HKMA AI circulars.” That number matched neither the six HKMA instruments then in the table nor the four HKMA supervisory-activity items. The 26 March 2026 alternative-data circular is a further instrument. Numeric headlines create maintenance debt on every pack release. The layered-framework reading does not.

Hong Kong did not publish a single AI Act. The HKMA issued a sequence of circulars and high-level principles that accumulate: consumer protection, AI principles, generative AI in banking, alternative data and further risk expectations as use cases matured.

Layers, not a monolith

Read chronologically, the set can feel fragmented. Read as layers, it is coherent:

Layer What it demands
Principles Accountability, explainability, fairness posture
Consumer outcomes Protection when analytics and AI touch customers
Generative AI Specific controls for foundation-model use in banks
Alternative data Credit assessment, onboarding and product delivery
Ongoing risk Monitoring, incidents and model-risk adjacency

A bank that treats each circular as a separate project pays again for every release. A bank that encodes a shared control taxonomy pays once, then differentials.

How we encode Hong Kong

The Hong Kong pack is In build. HKMA High-level Principles, BDAI, GenAI consumer protection, the alternative-data circular, ML/TF monitoring and the sandbox pair sit with PCPD, FSTB, SFC, DPO and OGCIO instruments on one control taxonomy. A new circular is a pack release, not a restart. Policy ships into Govern, Guard, Observe and Respond as signed bundles. Telemetry returns as redacted metadata. Prompts and responses stay in the client environment. See the Hong Kong Jurisdiction Pack.

Authorized institutions that treat each circular as a separate project will still be rebuilding last quarter’s customer outcomes from email when the next layer lands. Observe mode on systems that already touch customers is how the layered framework becomes evidence HKMA can use.