Hong Kong's personal data law given new teeth - what they mean for businesses
Related people
Headlines in this article
Related news and insights
Publications: 20 December 2023
The implication of the Foreign State Immunity Law on cross-border disputes in the PRC and Hong Kong
Publications: 09 August 2023
Global notes explained: Individual noteholders lack standing to wind-up issuers
Publications: 20 July 2023
China: Draft SEP antitrust guideline released by SAMR for public comment
Publications: 07 June 2023
The revised PRC Counter-Espionage law – what has really changed?
The Personal Data (Privacy) (Amendment) Ordinance 2021 (the Ordinance) came into effect on 8 October 2021.
It amends the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO), particularly to:
- criminalise doxxing, i.e. unconsented disclosure of personal information of targeted individuals and groups;
- introduce a cessation notice regime to tackle doxxing with extra-territorial reach; and
- substantially expand the investigation and enforcement powers of the Privacy Commissioner for Personal Data (the Commissioner), in contexts beyond doxxing.
In our publication, we consider what these changes may mean for businesses handling personal data from Hong Kong.