Data Protection Laws in Hong Kong

Whether you are looking for new ways to connect with your customers or need to upgrade your data center infrastructure, Hong Kong provides a world-class platform. With its strategic location, availability of sites and government support for data centre operators, Hong Kong is the ideal place to grow your business. Our colocation facilities are business hubs that are home to a dense concentration of enterprises, networks and IT services. Our carrier-dense network hubs offer you access to a global ecosystem and help your business achieve more with less.

The PDPO imposes six data protection principles on organisations, including the requirement to notify the Office of the Privacy Commissioner of any significant changes to the way they handle personal data. It also states that personal data must only be collected for a lawful purpose and that it should not be excessive in relation to that purpose. In addition, the PDPO imposes requirements on how data is used and the conditions under which it can be passed on to third parties.

What constitutes personal data is subject to interpretation, but it usually includes information that identifies a living individual or can be reasonably be expected to do so. This can include data such as names, telephone numbers and addresses, or more sensitive information such as a person’s genetic data, financial history or political opinions. The PDPO also states that personal data must be accurate and up-to-date and must not be retained for longer than necessary.

While modernisation of data protection laws in Hong Kong is mooted, businesses should ensure that they understand their obligations under the existing framework. This is especially the case for companies that use data-related technologies that can affect an individual’s behaviour.

GovHK uses an independent contractor to provide search service on this website. The independent contractor does not collect any personal identifiable information during your search activity on GovHK websites, but may share anonymous and statistical data with the Government for the purpose of compiling traffic analysis on government websites. You can choose not to allow the collection of such data by disabling JavaScript on your browser. However, this may limit your ability to use certain functions on GovHK, such as changing text size and the chatbot function.