
PCPD Contacts & Selected Highlights
Privacy Commissioner for Personal Data (PCPD)
The PCPD is an independent body set up to oversee the implementation of and compliance with the provisions of the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (the Ordinance). The PCPD strives to ensure the protection of the privacy of individuals in relation to personal data through monitoring and supervising compliance with the Ordinance, enforcing its provisions and promoting the culture of protecting and respecting personal data.
Established in August 1996, the PCPD is headed by the Privacy Commissioner for Personal Data and comprises different functional units, including the Complaints Division, Criminal Investigation Division, Compliance & Enquiries Division, Legal Division, Global Affairs & Research Division, Corporate Communications Division and Corporate Support Division.
Selected headlines
Data Protection Office Club with Newsletter
Selected e-Newsletter:
- An Investigation Report on the Data Breach Incident of Cyberport - https://www.pcpd.org.hk/english/enforcement/commissioners_findings/files/r24_12170_e.pdf
- Smart Use of Smartphones & Social Media - https://www.pcpd.org.hk//english/resources_centre/publications/files/leaflet_smartphones_e.pdf
https://www.pcpd.org.hk//english/resources_centre/publications/files/smart_on_socialmedia.pdf
- Guard against Whatsapp Hijacking - https://www.pcpd.org.hk/misc/dpoc/newsletter161.html
- Mainland Corner - https://www.pcpd.org.hk/misc/dpoc/newsletter161.html#Mainland
- Using Standard Contracts for Personal Data Transfer - https://www.pcpd.org.hk/misc/dpoc/newsletter161.html#techtalk
- Privacy 101 - https://www.pcpd.org.hk/misc/dpoc/newsletter161.html#privacy101
- Global Privacy Landscape - https://www.dataguidance.com/news/international-bureau-committee-convention-108-reviews
Resources by Topics
Direct Marketing- https://www.pcpd.org.hk/english/resources_centre/publications/files/GN_DM_e.pdf
"New" articles for Smart on Social Media_Use of Smartphones
https://www.pcpd.org.hk//english/resources_centre/publications/files/smart_on_socialmedia.pdf
https://www.pcpd.org.hk//english/resources_centre/publications/files/leaflet_smartphones_e.pdf
Guidance on Data Protection in Cross-border Data Transfer
New Recommended Model Clauses for Cross-border Transfer of Personal Data
https://www.pcpd.org.hk/english/whatsnew/files/BankingToday.pdf
Fact sheets/common questions Human Resource Management
Ethical Development and Use of Artificial Intelligence - guidance_ethical_e.pdf
10 TIPS for Users of AI Chatbots
Media Statement - The Personal Data (Privacy) (Amendment) Ordinance 2021 Takes Effect Today to Criminalise Doxxing Acts
Offence for disclosing personal data obtained without consent
Examples:
Sale by an employee of a company of customers’ personal data without the company’s consent, and for which he received payment from the purchaser.
Disclosure by a clinic staff of a celebrity’s health records, which he obtained without the clinic’s consent and the disclosure caused psychological harm to the celebrity.
Section number | Description of Offence | Maximum Financial Penalty | Maximum Imprisonment Sentence |
---|---|---|---|
35C(5) | A data user uses personal data in direct marketing without taking specified actions to give notice to the data subject | HK$500,000 | 3 years |
14(11) | A data user knowingly or recklessly supplies false or misleading information in a data user return or change notice | HK$10,000 | 6 months |
64(1)&(2) | A person discloses personal data obtained without consent from data user (i) with intent to gain or to cause loss to the data
subject; or (11) the disclosure causes psychological harm to the data subject | HK$1,000,000 | 5 years |