Data Privacy

Overview

In the beginning of 2020, the Constitutional and Mainland Affairs Bureau issued a discussion paper (the “Paper”) proposing amendments to the Personal Data (Privacy) Ordinance (Cap 486) (PDPO) to address public concerns about the adequacy of the PDPO in protecting personal data privacy amidst the rapid development of information and communication technologies as well as the widespread use of the internet and mobile communication.

Overview of the Current Data Protection Regime in Hong Kong

Direct Marketing Regime

How we can help

Financial Markets

Cryptocurrency

Navigating Hong Kong’s New Generative AI Guidelines: Key Considerations for Businesses https://hauzen.hk/wp-content/uploads/2023/06/vintage-data-storage-pexels-fox-6165934_1400x788.jpg 1400 788 Hauzen LLP Hauzen LLP https://secure.gravatar.com/avatar/89f4c19e43caa7e0225dad1d9dad1fec?s=96&d=mm&r=g 14/05/2025 11/09/2025

Navigating Hong Kong’s New Generative AI Guidelines: Key Considerations for Businesses

On 15 April 2025, Hong Kong’s Digital Policy Office (“DPO”) took a significant step in shaping the future of artificial intelligence (“AI”) governance with the release of the Generative Artificial Intelligence Technical and Application Guideline (the “Guideline”). Developed in collaboration with the Hong Kong Generative AI Research and Development Center, this framework aims to balance innovation…

Cybersecurity Law: Hong Kong Legislation to protect computer systems of Critical Infrastructure https://hauzen.hk/wp-content/uploads/2023/06/memory-pexels-pixabay-270549_1400x788.jpg 1400 788 Hauzen LLP Hauzen LLP https://secure.gravatar.com/avatar/89f4c19e43caa7e0225dad1d9dad1fec?s=96&d=mm&r=g 13/08/2024 19/11/2024

Cybersecurity Law: Hong Kong Legislation to protect computer systems of Critical Infrastructure

With surge in cyberattacks and several high-profile data breaches impacting thousands, LegCo discusses need for enhanced protection of critical infrastructures.

Hong Kong Privacy Commissioner for Personal Data Publishes Model Framework to Protect Personal Data in AI https://hauzen.hk/wp-content/uploads/2021/10/money-pexels-tima-miroshnichenko-6266453_1401x786sm.jpg 1401 786 Hauzen LLP Hauzen LLP https://secure.gravatar.com/avatar/89f4c19e43caa7e0225dad1d9dad1fec?s=96&d=mm&r=g 24/07/2024 15/08/2024

Hong Kong Privacy Commissioner for Personal Data Publishes Model Framework to Protect Personal Data in AI

As regulators around the world work to establish frameworks to promote ethical and compliant use of AI, Hong Kong has takes significant step.

PCPD FAQ on EU’s New Standard Contractual Clauses for Personal Data https://hauzen.hk/wp-content/uploads/2021/11/personal-data-pexels-thisisengineering-3861969_1400x787sm.jpg 1400 787 Hauzen LLP Hauzen LLP https://secure.gravatar.com/avatar/89f4c19e43caa7e0225dad1d9dad1fec?s=96&d=mm&r=g 10/11/2021 10/01/2022

PCPD FAQ on EU’s New Standard Contractual Clauses for Personal Data

From 27 September 2021 on, data exporters & importers can only conclude contracts incorporating new SCCs for transfer of personal data out of European Union.

Record keeping in the cloud: As an old law falls to a modern reality, do SFC licensees risk repercussions? https://hauzen.hk/wp-content/uploads/2020/08/hong-kong-islands-alice-mourou-e-VK4NxwN1c-unsplash_1402x790-sm.jpg 1402 790 Greg Heaton Greg Heaton https://secure.gravatar.com/avatar/aeb27e483ea54da0342f002ba531966f?s=96&d=mm&r=g 29/09/2021 22/04/2023

Record keeping in the cloud: As an old law falls to a modern reality, do SFC licensees risk repercussions?

Are your company records stored in the cloud? Licensees in Hong Kong beware you are likely breaching the Securities and Futures Ordinance.

Direct Marketing Regime https://hauzen.hk/wp-content/uploads/2021/11/personal-data-pexels-thisisengineering-3861969_1400x787sm.jpg 1400 787 Hauzen LLP Hauzen LLP https://secure.gravatar.com/avatar/89f4c19e43caa7e0225dad1d9dad1fec?s=96&d=mm&r=g 15/01/2021 10/01/2022

Direct Marketing Regime

The PDPO provides generally for all forms of direct marketing. Marketing of securities in particular is subject to further regulations under the Securities and Futures Ordinance and other laws.

Personal Data Privacy in the Financial Services Industry https://hauzen.hk/wp-content/uploads/2021/11/personal-data-pexels-thisisengineering-3861969_1400x787sm.jpg 1400 787 Hauzen LLP Hauzen LLP https://secure.gravatar.com/avatar/89f4c19e43caa7e0225dad1d9dad1fec?s=96&d=mm&r=g 15/01/2021 10/01/2022

Personal Data Privacy in the Financial Services Industry

The PDPO defines personal data as relating directly or indirectly to a living individual; from which it is practicable for the identity of the individual to be directly or indirectly ascertained; and
in a form in which access to or processing of the data is practicable.

Overview of the Current Data Protection Regime in Hong Kong

Direct Marketing Regime

How we can help

Navigating Hong Kong’s New Generative AI Guidelines: Key Considerations for Businesses

Cybersecurity Law: Hong Kong Legislation to protect computer systems of Critical Infrastructure

Hong Kong Privacy Commissioner for Personal Data Publishes Model Framework to Protect Personal Data in AI

PCPD FAQ on EU’s New Standard Contractual Clauses for Personal Data

Record keeping in the cloud: As an old law falls to a modern reality, do SFC licensees risk repercussions?

Direct Marketing Regime

Personal Data Privacy in the Financial Services Industry

Privacy Preferences