Security Services Agreement (Hong Kong)

A Hong Kong Security Services Agreement is a legally binding contract between a client and a licensed private security company governing the provision of security guarding, patrol, surveillance, and access control services. These agreements are governed by the Security and Guarding Services Ordinance (Cap. 460), the Personal Data (Privacy) Ordinance (Cap. 486), the Employees' Compensation Ordinance (Cap. 282), and general Hong Kong contract law.

The Security and Guarding Services Ordinance (Cap. 460) establishes the regulatory framework for the private security industry in Hong Kong. The Security and Guarding Services Industry Authority (SGSIA) issues Security Company Licences to security businesses and Security Personnel Permits (SPPs) to individual security officers. Type I SPP holders carry out static guarding duties at fixed posts; Type II SPP holders conduct mobile patrol duties. The SGSIA maintains public registers of licensed companies and permit holders, which clients should verify before engaging any security company.

Hong Kong has a substantial private security industry, with licensed security personnel deployed across commercial buildings, residential buildings, shopping malls, industrial facilities, Mass Transit Railway (MTR) stations, government buildings, and major events. The security industry in Hong Kong is required to meet training, conduct, and licensing standards set by the SGSIA under Cap. 460. Security officers in Hong Kong are private citizens and hold no special powers of arrest beyond those available under the Crimes Ordinance (Cap. 200) and common law — post orders must not purport to grant police powers.

For residential building security, the building's Deed of Mutual Covenant (DMC) and the management corporation — typically the Owners' Corporation or property management company — procure security services and determine the scope of security requirements. The Owners' Corporation must comply with the Building Management Ordinance (Cap. 344) in procuring services, including competitive tendering requirements for contracts above specified thresholds.

CCTV surveillance systems operated by security companies and property owners engage the Personal Data (Privacy) Ordinance (Cap. 486). The Office of the Privacy Commissioner for Personal Data (PCPD) has issued guidance on CCTV operations specifying notification obligations, footage retention limits (generally not more than 31 days for routine footage), and access controls. The Security Services Agreement must address PDPO compliance for all surveillance activities.

A notable feature of Hong Kong is the absence of GST or VAT — all security service fees are expressed in HKD and the stated amount is the total payable. This simplifies commercial arrangements compared to Singapore (9% GST) or the United Kingdom (20% VAT). Security companies must maintain Employees' Compensation insurance for all deployed personnel under Cap. 282, and public liability insurance of at least HK$10 million per occurrence for significant deployments.

The Security and Guarding Services Industry Authority (SGSIA) was established as a statutory body under Cap. 460 with power to issue, suspend, and revoke Security Company Licences and Security Personnel Permits. The SGSIA maintains a publicly accessible register of licensed companies and permit holders. Clients who engage an unlicensed security company, or a company deploying personnel without valid SPPs, commit an offence under Cap. 460 and expose themselves to criminal liability alongside the security company. Before signing any security services agreement, clients should verify the contractor's licence status and the SPP numbers of key deployed personnel on the SGSIA register.

A Security Services Agreement in Hong Kong is needed whenever a business, organisation, government agency, or residential community engages a licensed private security company to provide guarding, patrol, surveillance, or access control services.

Commercial buildings in Hong Kong's Central, Wan Chai, Kwun Tong, and Kowloon Bay business districts routinely engage security companies for lobby management, visitor access control, CCTV monitoring, and after-hours patrol. Grade A office buildings with multiple tenants typically require security services coordinated by the building management company, with service levels specified in the building's management agreement.

Owners' Corporations and property management companies procuring security services for residential buildings must comply with the Building Management Ordinance (Cap. 344), including competitive tendering requirements for security contracts above prescribed thresholds. The agreement should specify the scope of security at the building entrance, carpark, and common areas, and address the interaction between security staff and the building's fire safety system under the Fire Services Ordinance (Cap. 95).

Major events at venues such as the Hong Kong Convention and Exhibition Centre, AsiaWorld-Expo, or the Hong Kong Coliseum require event security management plans that may be reviewed by the Hong Kong Police Force as a condition of a Public Entertainment Licence under the Places of Public Entertainment Ordinance (Cap. 172). A Security Services Agreement for events must address crowd management protocols, emergency evacuation procedures, and the interface between private security and police.

Retail outlets — particularly jewellery stores, luxury goods retailers, and electronics shops — engage security services for loss prevention, customer management, and emergency response. The agreement should address the authority of security officers to detain suspected shoplifters under common law principles, which is limited to a citizen's power of arrest under the Crimes Ordinance (Cap. 200).

Industrial facilities, container terminals, and logistics warehouses in Kwai Chung, Tsing Yi, and Tuen Mun engage security companies for perimeter patrol, vehicle access control, and restricted area management. VIP and executive protection services are also regulated under Cap. 460 and require specifically trained and licensed security personnel holding Type II SPPs.

Government and statutory bodies procuring security services — including the Housing Department for public housing estates, the Architectural Services Department for government buildings, and the Leisure and Cultural Services Department for parks and venues — are bound by the Government Procurement Procedures and must follow open tender or restricted tender processes above prescribed thresholds. Private sector clients procuring security services under service-level agreements governed by cap-rate pricing should confirm whether the agreement complies with the Minimum Wage Ordinance (Cap. 608) requirements for all deployed personnel.

A Hong Kong Security Services Agreement must include the following essential elements to be legally effective and operationally sound under Cap. 460 and related legislation.

Licensing and compliance verification must confirm: the security company holds a valid SGSIA Security Company Licence issued under Cap. 460; all deployed security personnel hold valid SPPs (Type I for static guarding or Type II for mobile patrol, as appropriate to each role); and the security company complies with Cap. 460 training and conduct requirements. The client should request copies of the Security Company Licence and sample SPPs before signing. Deploying unlicensed personnel exposes both company and client to criminal liability under Cap. 460.

Scope of services must specify: the type of security services provided (static guarding, mobile patrol, access control, CCTV monitoring, alarm response, or VIP protection); the deployment locations by address and floor; the number of security posts and minimum staffing levels at each post; the hours and days of coverage; public holiday arrangements; and any specialised requirements such as armed escort or cash-in-transit.

Post orders and service standards must specify: the process for preparing and approving post orders for each deployment; key performance indicators for service quality including response times, patrol frequencies, and incident report turnaround times; escalation procedures for serious incidents requiring police notification; and the consequences of service failures including service credits and termination rights.

Surveillance systems must address Personal Data (Privacy) Ordinance (Cap. 486) compliance for all CCTV operations: notification signage requirements consistent with PCPD Guidance Note on CCTV; footage retention periods (maximum 31 days for routine footage unless specific footage is retained for investigation or legal proceedings); access controls limiting footage review to authorised personnel; audit logs of footage access; and procedures for handling data subject access requests under Section 18 of Cap. 486 and DPP 6.

Staff requirements must specify: minimum qualifications including SGSIA-approved training and a valid SPP for each security officer; uniform and equipment standards; conduct requirements prohibiting excessive force, discrimination under the Race Discrimination Ordinance (Cap. 602), and unauthorised disclosure of client information; and the client's right to request the removal of unsatisfactory officers.

Payment terms must specify: the monthly service fee in HKD (no GST or VAT applies in Hong Kong); rates for overtime beyond contracted hours; public holiday surcharges consistent with the Employment Ordinance (Cap. 57); payment due dates; and late payment consequences including interest.

Liability and insurance must specify: the security company's public liability insurance (minimum HK$10 million per occurrence for significant deployments); employees' compensation insurance under the Employees' Compensation Ordinance (Cap. 282) covering all deployed officers; the limitation of liability cap and exclusions consistent with the Control of Exemption Clauses Ordinance (Cap. 71); and the client's obligation to disclose known hazardous conditions.

Termination provisions must specify: the notice period for routine termination (typically 1–3 months); immediate termination rights where the SGSIA suspends or revokes the security company's licence, or where serious misconduct occurs; handover procedures including return of access cards, keys, and equipment; and post-termination confidentiality obligations. The forms-legal.com Security Services Agreement template is drafted for Hong Kong engagements and reflects Cap. 460 SGSIA licensing, PDPO surveillance obligations, and Cap. 282 insurance requirements. Security companies should maintain Employees' Compensation insurance for all deployed personnel under the Employees' Compensation Ordinance (Cap. 282), public liability insurance of at least HK$10 million per occurrence for significant deployments, and professional indemnity insurance. The Occupiers' Liability Ordinance (Cap. 314) imposes a common duty of care on clients as occupiers, requiring them to disclose known hazardous conditions at the premises to the security company before deployment commences.