Hong Kong: Data Protection

Artificial intelligence ("AI") has rapidly transitioned from experimental use to widespread adoption across Hong Kong. Organisations are now leveraging AI models to enhance customer service, improve risk management, and expedite research and development activities.

The Office of the Privacy Commissioner for Personal Data ("PCPD") released an updated version of the Information Leaflet on Legal Assistance for Civil Claims under the Personal Data (Privacy)...

Hong Kong's Privacy Commissioner for Personal Data (PCPD) recently published Guidelines for the Use of Generative AI by Employees.

The European Court of Justice (ECJ) ruled in TR v Land Hessen (C-768/21) that a supervisory authority is not obligated to impose an administrative fine following a data breach under the GDPR if it is unnecessary, inappropriate, or disproportionate. Authorities have discretion to decide on corrective actions based on the specific circumstances of the breach. If the data controller has already taken necessary steps to address and prevent recurrence, a fine may not be imposed. This decision influen

Which legislative and regulatory provisions govern social media in Hong Kong? The most relevant legislative and regulatory provisions in respect of social media are the following:

Pension schemes face increased cyber threats due to their valuable data and complex supplier chains. Regulatory expectations now require trustees to establish robust cyber defenses, monitor risks, map data flows, and maintain incident response plans, ensuring compliance with both the Pensions Regulator and ICO standards.

Asia IP & TMT: Quarterly Review - Third Quarter 2023

In July 2023, the Office of the Privacy Commissioner for Personal Data issued a revised guidance note on Data Breach Handling and Data Breach Notifications.

Apart from our Personal Data (Privacy) Ordinance ("PDPO"), the European Union's GDPR which takes effect from 25 May 2018 is an important...