When we send our kids to school, we operate under a silent contract. We assume the adults behind those closed gates are vetted, watched, and safe. That illusion shattered completely in Hong Kong when details emerged about Law Yuen-lung, a 30-year-old former primary school IT technician.
The High Court sentenced Law to 11 years in prison for molesting three young boys directly on a school campus. What makes this case particularly chilling is not just the breach of trust, but the systematic way he used his role to gain access to vulnerable children.
This isn't just another crime headline. It is a harsh wake-up call about how support staff are managed in schools and what we, as parents and communities, are missing.
The Illusion of School Safety
Law Yuen-lung was hired to manage computers. Instead, he used his position to hunt. The court heard that Law, who has since been diagnosed with a paedophilic disorder, kept a digital vault containing over 800 images of child pornography.
Let that sink in. A man with a severe, diagnosed disorder and an active collection of abusive material was given daily, unsupervised access to young children under the guise of "tech support."
Why does this happen? In many school environments, non-teaching staff like IT technicians, janitors, and administrative workers do not face the same continuous, rigorous observation as classroom teachers. They slip through the cracks. They have keys to empty classrooms, server closets, and quiet corners of the campus where security cameras rarely point.
Law exploited these exact blind spots. He did not assault these boys in a dark alley; he did it on school grounds, during school hours, right under the noses of administrators.
The Systemic Gaps in Background Vetting
Hong Kong operates the Sexual Conviction Record Check (SCRC) scheme. It is designed to prevent people with history of sexual offenses from working with children. But here is the loophole: the SCRC only flags past convictions.
If an individual has no prior criminal record, the system looks green. It cannot flag undiagnosed disorders, hidden digital collections, or predatory intents.
Schools often treat background checks as a one-time, "set-it-and-forget-it" task. Once the HR department files the clean record check at the time of hiring, the scrutiny drops. We need to shift from a system of static background checks to one of active, continuous campus vigilance.
- Unsupervised Access: Support staff should never be left entirely alone with individual students. No exceptions.
- Physical Security Blind Spots: Server rooms, IT labs, and equipment storage areas must be subject to strict double-custody access policies.
- Behavioral Monitoring: Training must extend beyond identifying physical signs of abuse to noticing grooming behaviors and unusual interactions between non-teaching staff and students.
What Parents Must Do Immediately
We cannot rely solely on institutional policies to protect our children. Schools are massive bureaucracies, and bureaucracies are slow to adapt. Protection starts with the conversations you have at home.
Talk to your kids. Do not scare them, but equip them with concrete boundaries.
Make sure they understand that no adult at school—whether it is a teacher, an IT worker, or a coach—should ever ask them to keep a secret. Teach them that they have the absolute right to say "no" to any physical contact, even from someone in authority.
Most importantly, watch for behavioral shifts. A sudden reluctance to go to school, anxiety around certain school zones, or unexpected secrecy are immediate red flags.
Law Yuen-lung will spend the next decade behind bars. But the institutional vulnerabilities that allowed him to target three innocent boys remain. It is up to school boards, administrators, and parents to demand tighter controls, continuous vetting, and a culture where child safety always takes precedence over administrative convenience.
