CLP is committed to delivering reliable, reasonably priced energy to its customers. By leveraging innovative technologies and customised services, CLP is enhancing customer satisfaction while promoting energy conservation and supporting the adoption of renewable energy. CLP is actively engaging with customers and other stakeholders to address their evolving energy needs and foster strong relationships, while at the same time contributing to sustainability and community wellbeing.
Copy linkCopied link
In 2025, the number of customer accounts in Hong Kong increased in all sectors, including residential, commercial, infrastructure and public services, and manufacturing.
CLP Power is the sole electricity provider for Kowloon, the New Territories and most of the outlying islands in Hong Kong. It serves about 2.90 million customers accounting for over 80% of Hong Kong’s households. Total electricity sold in 2025 was 35,760GWh.
Despite its status as a mature market, Hong Kong continues to experience growing demand for electricity. This is largely being driven by territory-wide development and infrastructure projects, new local railway infrastructure projects and new data centres. Hong Kongʼs Northern Metropolis Development Strategy requires highly reliable power supplies in support of this ambitious plan to transform the New Territories into a major urban centre and technology hub.
The number of customer accounts has continued to grow gradually over the last five years, mainly from the residential sector.
2025 | 2024 | 2023 | 2022 | 2021 | |
|---|---|---|---|---|---|
Total Hong Kong customers (number) | 2,895,398 | 2,830,411 | 2,789,644 | 2,752,071 | 2,711,421 |
Residential | 2,528,522 | 2,474,155 | 2,439,557 | 2,407,225 | 2,369,217 |
Commercial | 228,009 | 218,266 | 214,616 | 212,251 | 210,821 |
Infrastructure and Public Services | 122,248 | 121,479 | 118,548 | 115,404 | 113,956 |
Manufacturing | 16,619 | 16,511 | 16,923 | 17,191 | 17,427 |
EnergyAustralia operates as a retail energy provider, selling electricity and gas to customers in New South Wales, Victoria, South Australia, the Australian Capital Territory and Queensland (electricity only). It is among approximately 30 retailers active in the key markets of New South Wales and Victoria.
In 2025, total customer accounts declined by 3.5% due to intense retail competition.
Copy linkCopied link
CLP calculates the equivalent availability factor for its generation assets in terms of the amount of time that the asset is able to produce full load equivalent electricity over a period, divided by the amount of time in that period. Typical values range from 70% to 90%. CLP aims to maintain an equivalent availability range of 90% and above for its newer assets. For the equivalent availability factor of individual assets, please refer to 2025 Asset Performance Statistics.
While CLP has generation businesses across the Asia-Pacific region, Hong Kong is the only location where its business is vertically integrated, so that it provides generation, transmission and distribution of power as well as retail services. CLP Power is regulated by the Hong Kong SAR Government under the Scheme of Control (SoC) Agreement, which requires the Company to provide a sufficient and reliable electricity supply at a reasonable price and in an environmentally responsible manner.
CLP Power is committed to delivering a secure, reliable, and sustainable electricity supply to meet Hong Kong’s growing energy needs. To achieve this, the company adopts a multi-faceted strategy that combines infrastructure upgrades and maintenance, advanced technologies, and organisational development to enhance operational efficiency. Investment in generation and network facilities ensures sufficient capacity to meet forecast demand and manage both planned and unforeseen outages. Energy security has been further strengthened through the launch of the offshore liquefied natural gas terminal, enabling access to competitive global gas supplies. At the same time, innovative solutions such as Beyond Visual Line of Sight (BVLOS) pilot project, cage drones equipped with Light Detection and Ranging (LiDAR) systems, crawler robots, and a centralised Asset Health Monitoring System have been deployed to enhance operational efficiency, optimise preventive maintenance strategies and inspect overhead lines and towers. Complementary measures, including lightning protection systems, anti-flooding enhancements, and accelerated asset replacement programmes, help safeguard critical infrastructure against environmental risks.
To optimise system performance and prepare for emerging challenges, CLP Power is implementing demand response programmes in selected distribution networks to manage temporary local peak demand and support the integration of electric vehicles and renewable energy systems. Smart grid technologies, such as the Grid-V intelligent management system, enable real-time monitoring of critical assets and operating environments.
Looking ahead, CLP is continuing to pursue innovative projects in robotics, energy storage, video analytics, building information modelling (BIM), and automation, leveraging insights from regional experiences to strengthen its integrated management framework. These efforts are collectively reducing operational risks, enhancing portfolio management, and reinforcing CLP’s commitment to sustainable, reliable energy delivery for Hong Kong.
Effective emergency response and resilience during power outages are supported by close collaboration with government departments, property managers, and key customers. CLP Power also prioritises workforce development, investing in recruitment and training programmes such as the CLP Power Academy. By working with both local and international institutions, the academy prepares electrical and mechanical engineering professionals, ensuring a strong talent pipeline for the future of the power industry.
In Hong Kong, CLP Power has maintained its world-class supply reliability of 99.999%, surpassing the reliability performance of other major international cities such as Sydney, London and New York.
CLP Powerʼs transmission and distribution network in Hong Kong serves approximately 80% of the city’s population. At the end of 2025, CLP Power had approximately 17,358 km of circuits at medium or higher voltage. In addition, there were 257 primary and 15,944 secondary substations operating in Hong Kong. As of 2025, the average network loss for the past five years was 3.30%, slightly lower than the five-year average of 3.36% reported in 2024.
CLP Power uses a set of universally recognised supply reliability performance indicators from the Institute of Electrical and Electronics Engineers standard (IEEE 1366-2012) to monitor its system performance. It reports its performance against these indicators quarterly to the Hong Kong SAR Government.
Indicator | Result |
|---|---|
System Average Interruption Frequency Index (SAIFI) | |
The average number of supply interruptions for each customer served. Both planned and unplanned interruptions are included. |
|
System Average Interruption Duration Index (SAIDI) | |
The average duration of interruptions each customer may encounter in a given year. |
|
Unplanned Customer Minutes Lost (Unplanned CML) | |
The average duration of unplanned power interruptions per customer in a given year. These outages occur without prior notice and happen as a result of various factors such as weather events, third-party damage to the network and equipment faults. |
|
Copy linkCopied link
Careful planning during the project development stage plays a crucial role in determining the operational efficiency or capacity factor range of an asset over its entire lifespan. Projects involving a major asset overhaul must undergo stringent technical and financial scrutiny before commencement.
CLP’s customised Group Operations Information System (GOIS) is used to compile operational data on adherence to the Generator Operational Performance Data Standard. It features built-in data collection, a data compilation and approval sequence and a dashboard and reporting functions. Relevant staff at each asset, and at regional and Group levels are responsible for upholding the standard.
On the energy conservation and efficiency front, CLP has continued to strengthen its electricity supply networks and infrastructure to offer high-quality, efficient and reliable electricity in its operating regions. The Company uses innovative technologies and has developed energy management programmes and initiatives through environmental management processes and tools. In CLPʼs major offices, building energy management systems with energy-efficient features have been deployed, with some upgraded with artificial intelligence algorithms to support smart energy control, particularly for air conditioning. Regular energy audits assess energy consumption efficiency and identify opportunities for improvement. CLP Power also sets energy-saving targets with a defined timeline for selected offices. An internal energy use target ensures energy utilisation remains below a reference Energy Utilisation Index (EUI).
In 2025, coal consumption decreased year-on-year while gas consumption remained broadly stable (operational control basis). On an equity plus long-term capacity and energy purchase basis, the electricity sent-out mix continued to evolve: coal’s share declined, while both gas and nuclear contributions increased, demonstrating gasʼ ongoing role in providing flexibility and transition support, alongside continued access to reliable, non-carbon electricity supply.
CLP reports the annual operating performance of those of its generation assets that fall within the reporting scope. The asset performance metrics include availability, energy sent out, thermal efficiency, and energy intensity.
Download CLP’s asset performance statisticsCoal consumption declined by 12% year-on-year, reflecting lower coal-fired utilisation across the portfolio. The reduction was driven by Hong Kong decarbonisation efforts, where coal use declined by 20%, and by lower dispatch and reduced availability in Australia, with coal consumption down by 9%, notably at Mount Piper and Yallourn Power Stations. Gas consumption was broadly flat year-on-year. In Hong Kong, gas use edged down by 1% due to lower local demand and higher nuclear offtake, supported by ongoing efficiency improvements. By contrast, Australia’s gas consumption increased by 18%, consistent with higher dispatch of gas‑fired assets during the year.
CLP continued to deliver electricity from a diversified mix across thermal, nuclear and renewables, generating 77,268 GWh in 2025 on an equity plus long-term capacity and energy purchase basis, 3% lower than 2024. The decrease was primarily driven by a lower coal contribution, reflecting reduced coal-fired utilisation across the portfolio, including Hong Kong’s reduced reliance on coal and weaker coal output in Australia, as well as the exit of coal-fired minority assets on the Chinese Mainland. This was partially offset by higher nuclear offtake in Hong Kong and a modest increase in gas contribution (including the rebound in Australiaʼs Tallawarra following an improved operational profile), with incremental support from renewables and waste‑to‑energy.
Copy linkCopied link
CLP is implementing various initiatives to encourage residential and business customers and the community at large to use energy more efficiently and contribute to environmental protection. They include:
In addition to its SoC Agreement obligations, CLP has harnessed its innovation abilities and digital capability to develop a range of customer-facing solutions and energy services.
CLP continues to harness its global open innovation platform to connect solutions to business needs, address operational challenges, enhance efficiency and unlock new business opportunities. Through initiatives such as Free Electrons and the Phoenix scouting programme, CLP collaborates with start-ups worldwide to foster innovation, gain valuable market insights, and conduct risk-mitigated pilot before scale-ups. To strengthen its ability to meet customer needs and effectively navigate the energy transition, CLP also expanded its innovation ecosystem reach by collaborating with Hong Kong Science and Technology Parks Corporation.
CLP is developing technology roadmaps that will identify emerging ideas and technologies that could have significant long-term impacts on both CLPʼs operation and the wider energy transition. CLP has established robust research networks and partnerships with local and international associations, research institutes and universities, and is collaborating on several key projects. Notably, CLP is studying generation decarbonisation and the utilisation of urban flexible load resources to enhance power system flexibility through its Research Fellowship Scheme.
Improving energy efficiency | ||
|---|---|---|
Products and services | Updates in 2025 | |
Cooling-as-a-Service (CaaS) Cooling systems are usually a building’s largest source of power consumption. CLPe provides targeted solutions such as chiller retrofitting and replacement services, CaaS and district cooling solutions to enhance energy efficiency and reduce carbon emissions in building complexes. Under the Build-Own-Operate-Transfer model, CLPe will fund, design, construct, operate and maintain the new cooling system over a period of time at an agreed rate. |
| |
Solar-as-a-Service (SaaS) CLPe offers seamless, one-stop services to help customers install and operate solar power systems over a period of time at an agreed rate. Solar photovoltaic (PV) systems convert solar energy into electricity to support energy demand and allow customers to feed electricity back into the grid. |
| |
Battery Energy Storage System (BESS) as-a-Service Tailor-made BESS solutions can greatly improve business performance by providing safe, efficient and secure energy storage. CLPe provides a one-stop design, build and implementation service together with technical and maintenance support, collaborating with its customers over a period of time at an agreed rate, helping develop fully integrated energy storage solutions that meet their specific needs. |
| |
Improving energy efficiency | ||
|---|---|---|
Products and services | Updates in 2025 | |
Energy efficiency improvement for buildings
|
| |
Energy efficiency improvement for businesses CLP Power works in partnership with different businesses and offer flexible and innovative smart solutions to them. |
| |
Peak demand management
|
| |
Energy management technology
|
| |
Energy audits CLP Power provides free energy audits and various consulting services to C&I customers to help them understand their energy needs and identify opportunities to reduce their energy use and hence their operating costs. |
| |
Energy data and analytics
|
| |
CLP Retro-Commissioning and Retrofitting Charter Programme CLP Power offers free retro-commissioning and retrofitting training courses, comprising classroom trainings and field visits for energy management employees and engineers who already have a basic understanding of retro-commissioning and retrofitting. The training covers advanced topics and techniques such as data analysis, system diagnosis, measurement and verification. |
| |
Using electricity more widely for transport industry | ||
|---|---|---|
Products and services | Updates in 2025 | |
Electric Vehicle Charging-as-a-Service (EV CaaS)
|
Additionally, CLPe secured a deal to install and operate chargers at a newly built development on Hong Kong Island, adding a substantial number of DC and AC chargers in a prime location.
| |
Electric vehicle infrastructure
|
| |
Ship-to-Ship Liquefied Natural Gas (LNG) Bunkering as a Service Following the release of the Hong Kong Government’s Action Plan on Green Maritime Fuel Bunkering, CLPe has partnered with China National Offshore Oil Company Guangdong Water Transport Clean Energy Company Limited (CNOOC) to provide LNG fuel bunkering services in Hong Kong. |
| |
Enabling zero-carbon electricity supply | ||
|---|---|---|
Products and services | Updates in 2025 | |
Decentralised renewable energy/ CLP offers feed-in tariffs for its customers, in support of energy decentralisation and renewable energy.
|
| |
Corporate Power Purchasing Agreements (PPAs) Businesses wishing to increase the direct renewable energy available to them may elect to enter PPAs with CLP. PPAs provide customers with the most credible and efficient clean energy available. There has been continued interest in the direct purchase of renewables, whether via annual purchasing or 24/ |
| |
Offsetting emission that cannot be otherwise avoided | ||
|---|---|---|
Products and services | Updates in 2025 | |
Energy attribute certificates (EACs) CLP offers a range of EACs to support customersʼ decarbonisation objectives. In Hong Kong, Renewable Energy Certificates (RECs) offer an alternative way for customers to support local clean energy generation. Each unit of a REC represents the environmental attributes of electricity produced by local renewable energy sources, generated or purchased by CLP Power. On the Chinese Mainland, CLP China’s renewable assets issue Green Electricity Certificates (GECs) which are the only officially recognised renewable energy certificates on the Chinese Mainland. They can be used to meet obligations under the Chinese Mainland’s mandatory Renewable Energy Portfolio Standard, or to support voluntary green power trading. In Australia, EACs serve as an option to reduce customersʼ Scope 2 emissions when decentralised renewables are not a viable option. For example PureEnergy from EnergyAustralia helps customers support the production of renewable electricity from government accredited renewable sources. |
| |
Carbon Credits Carbon credits represent carbon emissions avoided as a result of emissions reduction projects. CLP encourages its customers and corporates to purchase these carbon credits to offset their unavoidable emissions. In addition to selling carbon credits, CLP also collaborates with many industries to deliver carbon offset initiatives. |
| |
Copy linkCopied link
EnergyAustralia is required to report data breaches in any case of unauthorised access to, unauthorised disclosure of, or loss of personal information held by EnergyAustralia, if this is likely to result in serious harm to one or more individuals and if EnergyAustralia has been unable to prevent the likely risk of serious harm with remedial action. Notifications must be made to the Office of the Australian Information Commissioner (OAIC) and to the affected customers with a description of the data breach, the kinds of information involved and recommendations for customer action in response to the data breach.
In May 2018, the Australian Government announced that energy data would be included in the Consumer Data Right (CDR). The sharing of product data in the energy sector commenced on 1 October 2022 and consumer data sharing commenced on 15 November 2022. It gives customers the right to share certain transaction, usage and product data relating to their electricity accounts with EnergyAustralia (a ‘data holderʼ) with authorised parties (‘data recipientsʼ) under the CDR regime. These data recipients are then able to compare what other electricity offers may better suit the customer’s needs. EnergyAustralia was granted an exemption by the Australian Competition and Consumer Commission (ACCC) from the original commencement date in November 2022, requiring EnergyAustralia to commence CDR data sharing by 15 May 2023.
By 15 May 2023, EnergyAustralia successfully went live as a CDR ‘data holder’, meaning EnergyAustralia is now able to share information required under the CDR regime for most of its eligible residential, small business and large business customers. EnergyAustralia continues to refine its CDR data sharing platform as it receives feedback and enquiries from customers or other CDR participants. As of 30 April 2025, EnergyAustralia has operationalised capability to comply with CDR for certain innovative and trial products such as ‘Solar Home Bundle’.
The CLP Privacy Principles set out the Company’s commitment to protecting personal data and its approach to doing so. CLP has a designated Corporate Data Protection Officer who oversees governance of the personal data management of CLPʼs Hong Kong business operations. Their contact details can be found on CLP’s CLP Privacy Policy Statement.
The Group safeguards the confidentiality of the personal data provided to it in accordance with the CLP Privacy Policy Statement,
which took effect from 1 November 2018. The statement lays out the Company’s approach to protecting personal data, and is applicable to everyone across its Hong Kong operations who handles personal data. All employees who have to handle or process personal data of any individual for business operations in Hong Kong must follow CLP procedures, practices and local regulations in relation to personal data privacy.
The CLP Personal Data Protection Compliance Manual sets out CLP’s data protection compliance framework, including its governance structure and the roles and responsibilities of different functions and personnel within it. All business units with operations in Hong Kong must implement and abide by this manual, which also provides guidance on the use and protection of personal data. Policies and procedures regarding privacy and data protection are further embedded in CLPʼs Code of Conduct and its compliance management procedures.
Under the Code of Conduct, CLP commits to compliance with all laws and regulations and with the Companyʼs own policies and procedures, including the data privacy laws and the CLP Data Protection Compliance Manual. The Code of Conduct stipulates that anyone found violating the Code will be subject to disciplinary action. CLP’s internal audit function appraises compliance with policies and procedures, and evaluates the effectiveness of the overall controls, in accordance with normal audit cycles and assessment scopes. In addition, suppliers are informed of and are expected to comply with the data privacy laws outlined in CLP’s Supplier Code of Conduct.
CLP monitors and documents any complaints related to breaches of customer privacy and the loss of customer data. In addition to adhering to the CLP Personal Data Protection Compliance Manual, the Customer Success and Experience Business Unit has adopted a written guideline for handling customer data incidents. The guideline includes information about classifying and assessing the scope and severity of data incidents, about reporting roles and responsibilities, and it includes an incident response strategy and checklist. The Corporate Data Protection Officer also retains a record of data incidents and any follow-up actions.
EnergyAustralia has a Data Breach Response Plan, and a Data Breach Response Team responsible for implementing it. The plan includes information about assessing, managing, containing and reporting data breaches within required timeframes and outlines relevant roles and responsibilities. The plan is activated whenever a potential data breach is identified.
Learn how CLP responds to cybersecurity incidentsTo help prevent unauthorised disclosures of customer data to malicious attackers or impersonators, CLP carries out activities to raise staff awareness of the relevant risks. These include communications and quality assurance assessment and coaching and additional training for frontline staff. It also conducts Company-wide communications, employee training and briefing sessions with leadership to ensure all staff understand current privacy and data management obligations. A Data Breach Response Plan has been formulated and a Data Breach Response Team established to ensure the business has the capability and the procedures in place to respond swiftly to any such incidents.
A compulsory e-learning programme on data protection is given to all new employees, and is periodically mandated for all employees to refresh their knowledge. CLP also runs frequent tailored data protection awareness programmes, which include regular briefings, case sharing, quizzes and refresher activities, for employees who have regular interaction with protected data (such as members of the Legal Review Committee and frontline staff). Industry threats are continuously reviewed with a view to strengthening controls over the management and monitoring of networks, systems and mobile devices, data loss and suspicious cyber activities. CLP also regularly emphasises the importance of reporting potential privacy incidents in a timely manner.
At EnergyAustralia, briefing sessions on customer privacy include leadership, enterprise-wide communications and employee training to ensure all staff are up to date with current privacy and data management policies and practices. Privacy training is a compulsory requirement for all new employees and subsequent refresher training is provided to all employees annually.
Under Australiaʼs Privacy Act 1988 (Privacy Act), EnergyAustralia has obligations to ensure the appropriate collection, use, disclosure and security as well as access to individualsʼ own personal information. There are also mandatory data breach reporting obligations in relation to Notifiable Data Breaches. EnergyAustralia is required to report data breaches if there are any unauthorised access to, unauthorised disclosure of, or loss of personal information that EnergyAustralia holds where this is likely to result in serious harm to one or more individuals and it has been unable to prevent the likely risk of serious harm with remedial action.
As was reported last year, on 28 November 2024, the Australian Parliament passed the first set of amendments to the Privacy Act to create a statutory tort for serious invasions of privacy and provide the privacy regulator with additional rights to enforce penalties for breaches of privacy. The amendments also created a new obligation for EnergyAustralia to ensure that individuals are informed about situations where automated decision-making (ADM) ‘could reasonably be expected to significantly affect the rights and interests of an individual’. The timeline for compliance with the ADM transparency requirements is two years. EnergyAustralia is continuing to develop its plans for complying with the ADM requirements and monitoring for any new changes and developments that are announced.
In 2025, no cases of customer data loss were reported by CLP Power in Hong Kong, one case was reported by EnergyAustralia to the Office of Australian Information Commissioner which involved potentially fraudulent activity by a third party.
Copy linkCopied link
CLP provides customers with information about its products and services through various communication channels, including the email welcome pack sent to new customers, the CLP Power websites and the CLP Mobile App, as well as the EnergyAustralia websites and Mobile Apps. CLP also engages with its residential, commercial and industrial customers through satisfaction surveys, online service portals, site visits to its assets, account manager support and through its Customer Service Centres and Customer Interaction Centre.
CLP strives to respond effectively to customer needs and preferences. All escalated cases are studied thoroughly to ensure issues raised by customers are appropriately resolved.
In Hong Kong, an external market research consultant conducts an annual telephone survey to measure customer satisfaction. The customer satisfaction score considers overall satisfaction towards CLP and includes a relative rating comparing CLP to an ideal utility in Hong Kong. The score is benchmarked against the public utilities in the energy sector and other public service organisations.
EnergyAustralia counts the number of calls and complaints it receives and measures customer satisfaction through its Strategic Net Promoter Score (SNPS). Customer satisfaction is measured monthly via an online NPS survey sent to a representative group of customers. The Transactional Net Promoter Score (TNPS) is also used to track customer satisfaction in relation to specific customer interactions, providing more direct feedback to frontline staff.
CLP Power’s customer satisfaction score remained stable in 2025 and is on a par with other public service organisations.
EnergyAustralia’s strong dedication to handling customer complaints is reflected in its consistent focus on timely engagement, effective communication, and personalised support. This commitment to continuous improvement in complaint resolution is reflected in a Transactional Net Promoter Score of 37.9, underscoring the organisation’s unwavering priority to put customers first and deliver reliable, high‑quality service across all touchpoints.
In 2025, total complaint volumes increased by 3% compared to 2024, with Ombudsman escalations decreasing by 11% year-on-year. This reflects a higher proportion of issues being identified and resolved internally through more timely and direct customer engagement.
The marginal increase in internal complaints was due to enquiries relating to the expiry of a benefit plan, with customers seeking clarification on changes to discounts and rates upon the planʼs expiry. These cases were managed through clear and consistent communication, ensuring customers received accurate information and appropriate resolutions.
Total complaint volumes in 2025 marginally increased by 3.4% from 2024.
TNPS slightly decreased to 37.9 from 2024, but it still demonstrates a continued focus on addressing customer concerns quickly and effectively, reducing the need for further escalations through early engagement in the customer journey.
Copy linkCopied link
With global AI adoption rapidly increasing and new regulations such as the emergence of the European Union’s AI Act, CLP recognised the need for proactive governance to mitigate risks and build trust in the safe, ethical and transparent use of AI.
The CLP AI Policy establishes the governance framework and structures required for responsible AI use across the Group. The policy clearly defines what constitutes AI, explains the need for governance, and sets expectations for all stakeholders. The policy outlines accountability, escalation points, and reporting structures to ensure informed oversight by the Group Executive Committee and the Board as well as to define how risks are identified, assessed, monitored, and reported at both the use case and business unit levels, using the Group AI Risk Taxonomy in line with the Group Risk Matrix. In addition, the policy provides practical guidance including actionable do’s and don’ts, human oversight requirements, transparency measures such as AI disclaimers, and standards for multimedia development to mitigate risks like deepfakes.
CLP has formal structures in place to assess AI risks. All AI use cases undergo formal assessments across the deployment life cycle, which evaluate factors such as ethical use, data privacy, and human oversight to ensure responsible implementation. AI assessments are also included in procurement workflows, to ensure that external suppliers and solutions meet CLP’s AI standards. These AI assessments extend to existing solutions that introduce new or incremental AI features.
CLP has also established principles for internal teams and external vendors producing AI-generated content, to ensure responsible, ethical and consistent practices.
These efforts enable CLP to balance innovation with robust governance and controls in adopting AI solutions or instruments.
Copy linkCopied link
CLPʼs cybersecurity management follows international cybersecurity frameworks, and includes setting guidelines for selecting and implementing security controls to mitigate cyberattack risks. To comply with local regulations, some Regional/Business Units have developed their own documents that align with both local requirements and Group Securityʼs 20 baseline standards.
The Groupʼs employees are its first line of cybersecurity defence, and need to know how they can protect themselves and the Company from cyberattacks.
CLP makes continual efforts to raise cybersecurity awareness among employees and encourage them to adopt good cybersecurity practices. Security awareness activities include simulated phishing emails, internal broadcast campaigns, briefings, road shows and videos.
CLP continually monitors its IT and OT systems and networks, staying alert for potential threats. Advances in cybersecurity technologies have helped improve the Groupʼs ability to prevent, detect, react and recover from cybersecurity incidents in both the IT and OT network environments.
The Security Operations Centre (SOC) has refined its operations and accelerated its incident response capability. Employees are reminded regularly to report suspicious cyber activity directly to CLP Group Security via various channels, and suspicious emails can be automatically reported with the click of a button.
The Group-wide cybersecurity strategy, structured around an internationally recognised cybersecurity framework, is also being refreshed to align with business objectives and regulatory changes. It is incorporating lessons learned from Red Team exercises, a maturity assessment, and audits. In addition, both Hong Kong and the Chinese Mainland have introduced additional laws to strengthen the security of computer systems and data. On the Chinese Mainland, the Regulations on Network Data Security Management came into effect on 1 January 2025, providing a structured and operational framework for safeguarding network data. In Hong Kong, the Protection of Critical Infrastructure (Computer Systems) Ordinance (Cap. 653) took effect on 1 January 2026 and aims to enhance the computer system security of critical infrastructure to minimise the potential for cyber disruption or compromise of such services.
At CLP, strong data security, infrastructure protection, and cybersecurity remain key priorities. While compliance with these laws has not required significant financial investment, our businesses have taken this opportunity to conduct a comprehensive review of existing processes and implement enhancements, including the establishment by Group Security of a dedicated task force which reviewed the requirements and coordinated the action required to meet the new regulatory obligations. In addition, cybersecurity-related standards are regularly updated to take into account technological advances, changing legislation and emerging standards of good practice.
To strengthen resilience, the Security Architecture Team has developed and implemented a Security-by-Design framework that enables streamlined, risk-based decision-making for cybersecurity throughout the entire project lifecycle.
Across the Group, we have continued to test the resilience of CLP’s assets and sites, working with the relevant business units to help them apply appropriate controls and measures to protect people, equipment and information.
CLP’s Red Team simulates real-world cyber attacks and then works with business units to assist with remediating the findings and addressing vulnerabilities. The Risk Assessment Team helps the business understand how threat actors can exploit weaknesses to compromise the confidentiality, integrity or availability of data, and offers mitigation options to bring risks within acceptable levels.
Finally, security awareness of cyber threats has been enhanced by the introduction of a next-generation phishing simulation and reporting tool, as well as a comprehensive programme of webinars, broadcasts and training sessions.
Copy linkCopied link
The Group Security Policy addresses the following areas:
The Group Security team was established to ensure that CLP’s cyber and physical security capabilities and efforts complement each other, and gives CLP in-house capabilities across the full range of security skillsets. Regular reports are provided by Group Security to the Board’s Audit & Risk Committee (ARC), providing assurance that adequate risk management is in place and that appropriate remedial action is being taken where needed.
The Company also maintains its duty of care by providing employees with travel security guidance and a security support service.
Copy linkCopied link
CLP has developed a body of standards and guidelines to assist all regions and regional assets in establishing or revising their security management documentation. These are aligned with international standards for security and lay out best practices from across the Group. They include:
CLP security staff must always comply with CLP’s Code of Conduct. They receive related training on an annual basis. In addition to training on national regulations and site-specific requirements, contract security staff receive induction training on CLP policies relating to a harassment-free workplace, minimum wage guidelines and measures preventing discrimination in the workplace. They must complete this induction training before being granted access to their assigned workplace sites.
Regular travel security awareness briefings and associated materials are available for anyone engaged in business travel.
Copy linkCopied link
CLP maintains robust and regularly tested emergency response and crisis management procedures. As the first line of defence, the Incident Management Process (shown below) is activated whenever any incident arises.
CLP’s Group Crisis Management Plan ensures high levels of preparedness in responding to and recovering from emergency situations and helps minimise disruption to customers. The Plan is continually being reviewed and enhanced to ensure it remains in line with operational changes and the broader operating context. It provides a strong platform for effectively handling any crisis at the Group level. The plan:
The Group-level plan is supported at the regional level by Regional Crisis Management Plans which mirror the Group document but are tailored for each region. In addition, detailed emergency response plans have been developed for each asset. These plans are designed to be used by first responders and asset managers.
CLP’s Crisis Management & Emergency Response Structure is outlined in the diagram below.
As specified in both Group and regional publications, emergency response drills are conducted at least annually at all Group sites, with smaller scale drills taking place more often. Group and Regional Crisis Management Plans are reviewed at least every three years. Regional crisis management exercises are conducted annually as part of the internal peer review process.
Initiatives continued in the year included:
CLP has strengthened safeguards, enhanced monitoring and increased contingency measures to ensure its electricity supply systems remain safe and highly reliable during extreme weather events.
In Hong Kong, overhead lines make up over 30% of CLP Power’s transmission network. These are more susceptible to adverse weather, lightning strikes and external interferences such as fallen trees that could affect power supply reliability.
CLP Power stepped up inspections of the power supply equipment in the network ahead of typhoon season, using helicopters and drones to examine transmission towers and overhead cables and pruning trees that could interfere with overhead lines. Floodgates have been installed at substations at risk of flooding during severe weather and emergency drills conducted to ensure staff’s readiness to respond swiftly and effectively to typhoon and storm impacts.
Extreme weather events could also result in voltage dips and power interruptions, bringing inconvenience to customers. CLP Power’s System Control Centre closely monitors grid operations throughout typhoons and storms, and emergency teams and additional personnel are dispatched promptly where necessary to restore power to affected customers.
CLP Power’s 24-hour Customer Service Hotline service has been bolstered to enhance responsiveness during extreme weather events. CLP Power also maintains close coordination with relevant government departments and communities across its supply area during typhoons or power incidents to facilitate timely responses and coordinate power restoration efforts.
In 2025, Hong Kong experienced a record-breaking 14 typhoons, including two No. 10 hurricane signals issued under Super Typhoon Ragasa and Typhoon Wipha. Five instances of black rainstorms were also recorded in July and August. Despite the extreme weather, CLP Power’s power supply system maintained a high overall performance, demonstrating the effectiveness of our preparedness efforts.
CLP has also implemented a range of measures across the Group’s value chain to strengthen its resilience to climate change, tailored to different geographies, asset types and locations, as summarised in the table below.
Relevant part of the value chain | Climate-related adaptation measures |
|---|---|
Transmission and distribution | To address extreme heat and increased temperature:
To address flooding:
To address tropical storms:
|
Retail |
|
Condition monitoring and service recovery |
|