VPNs with servers in Macao

Under article 25, a network operator must verify and register the identity of each customer when contracting internet access, domain-name registration or public telecommunications service, on the same fine. The law defines a network operator as an entity authorised to operate public fixed or mobile telecommunications networks and to provide internet access. Whether a VPN operator is covered is not established.

Article 16(1)(5) of Law 11/2009 lets the competent judicial authority order an internet service provider to apply measures to remove specific illegal computer data or to block access to it expeditiously. A holder of a personal, direct and legitimate interest may challenge such an order before the investigating judge within ten days (article 16(4)).

Law 11/2009 punishes illegal access to a computer system (up to one year), unlawful use of data, interception of non-public transmissions (up to three years) and damage to data (articles 4 to 7); these concern systems rather than speech. Article 23 of the Basic Law requires Macau to legislate against treason, secession, sedition and subversion, and the Legislative Assembly passed an amendment to the national security law, Law 2/2009, on 18 May 2023.

To identify an account, the judicial authority may order an internet provider to supply the basic data it holds on subscribers, or order real-time access to traffic data (article 16(1)(2), (4)). Criminal police may act first where delay endangers important interests, subject to validation by the judicial authority within 72 hours.

Macau is a special administrative region of the People’s Republic of China. Under the Basic Law its courts exercise judicial power independently and are subject to nothing but law (article 83), while the Central People’s Government is responsible for its defence and foreign affairs (articles 13 and 14). Article 32 protects privacy of communication, allowing the relevant authorities to inspect communications under the law for public security or criminal investigation.

The order of the rows is the security score, and a server’s location is not a recommendation.