As work-from-home (WFH) arrangements become more prevalent, the Privacy Commissioner for Personal Data, Hong Kong has issued three guidance notes for the handling of personal data connected with WFH arrangements.
An employer's legal obligations as a data user are no different in a WFH arrangement than those in an office environment. However, the circumstances around how personal data may be used, stored and handled will be different in a WFH setting and employers need to cater for that. Employers should consider how personal data may be used, stored and handled in the WFH environment and address their obligations as a data user under the Personal Data (Privacy) Ordinance (PDPO). The three guidance notes will provide some assistance in doing this. Some of the recommendations in the guidance notes will seem obvious (like having appropriate policies and training), while others are a bit more technical dealing with device management, VPNs and remote access.
The guidance notes are not statements of law and employers have no legal obligation to follow the recommendations in the notes. That said, employers that comply with the recommendations are unlikely to breach the PDPO.
The guidance notes are available at the following links:-
- Protecting Personal Data under Work-from-home Arrangements: Guidance for Organisations
- Protecting Personal Data under Work-from-home Arrangements: Guidance for Employees
- Protecting Personal Data under Work-from-home Arrangements: Guidance on the Use of Video Conferencing Software
Visit us at www.mayerbrown.com
Mayer Brown is a global legal services organization comprising legal practices that are separate entities (the Mayer Brown Practices). The Mayer Brown Practices are: Mayer Brown LLP, a limited liability partnership established in the United States; Mayer Brown International LLP, a limited liability partnership incorporated in England and Wales; Mayer Brown JSM, a Hong Kong partnership, and its associated entities in Asia; and Tauil & Chequer Advogados, a Brazilian law partnership with which Mayer Brown is associated. "Mayer Brown" and the Mayer Brown logo are the trademarks of the Mayer Brown Practices in their respective jurisdictions.
© Copyright 2020. The Mayer Brown Practices. All rights reserved.
This article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein. Please also read the JSM legal publications Disclaimer.