The rule applies to investigations connected to the financial hub's strict national security law. Those who fail to comply face up to a year in prison or a fine of over $10,000.