Hong Kong's personal data law given new teeth - what they mean for businesses
Related people
Headlines in this article
Related news and insights
Publications: 09 August 2023
Global notes explained: Individual noteholders lack standing to wind-up issuers
Publications: 20 July 2023
China: Draft SEP antitrust guideline released by SAMR for public comment
Publications: 07 June 2023
The revised PRC Counter-Espionage law – what has really changed?
Publications: 12 May 2023
Bankruptcy petition vs exclusive jurisdiction clause - Who has the last word?
The Personal Data (Privacy) (Amendment) Ordinance 2021 (the Ordinance) came into effect on 8 October 2021.
It amends the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO), particularly to:
- criminalise doxxing, i.e. unconsented disclosure of personal information of targeted individuals and groups;
- introduce a cessation notice regime to tackle doxxing with extra-territorial reach; and
- substantially expand the investigation and enforcement powers of the Privacy Commissioner for Personal Data (the Commissioner), in contexts beyond doxxing.
In our publication, we consider what these changes may mean for businesses handling personal data from Hong Kong.