Hong Kong: Data Protection

The Protection of Critical Infrastructures (Computer Systems) Bill (the "Bill"), as the first law in Hong Kong to deal with cybersecurity was passed on 19 March 2025...

Artificial intelligence ("AI") has rapidly transitioned from experimental use to widespread adoption across Hong Kong. Organisations are now leveraging AI models to enhance customer service, improve risk management, and expedite research and development activities.

The Office of the Privacy Commissioner for Personal Data ("PCPD") released an updated version of the Information Leaflet on Legal Assistance for Civil Claims under the Personal Data (Privacy)...

The Hong Kong Electrical and Mechanical Services Department ("EMSD") is a department of the government of Hong Kong.

The European Court of Justice (ECJ) ruled in TR v Land Hessen (C-768/21) that a supervisory authority is not obligated to impose an administrative fine following a data breach under the GDPR if it is unnecessary, inappropriate, or disproportionate. Authorities have discretion to decide on corrective actions based on the specific circumstances of the breach. If the data controller has already taken necessary steps to address and prevent recurrence, a fine may not be imposed. This decision influen

Which legislative and regulatory provisions govern social media in Hong Kong? The most relevant legislative and regulatory provisions in respect of social media are the following:

On 13 December 2023, the Cyberspace Administration of China and Hong Kong Innovation Technology and Industry Bureau jointly...

Asia IP & TMT: Quarterly Review - Third Quarter 2023

In July 2023, the Office of the Privacy Commissioner for Personal Data issued a revised guidance note on Data Breach Handling and Data Breach Notifications.