Skip to content

Hong Kong's personal data law given new teeth - what they mean for businesses

Related people
Cheung Fai Hung
Fai Hung Cheung

Partner

Hong Kong

View profile →

Huang Jeffrey
Jeffrey Huang

Senior Associate

Hong Kong

View profile →

Image of Gwyneth Lau
Gwyneth Lau

Associate

Hong Kong

View profile →

12 October 2021

The Personal Data (Privacy) (Amendment) Ordinance 2021 (the Ordinance) came into effect on 8 October 2021.

It amends the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO), particularly to:

  • criminalise doxxing, i.e. unconsented disclosure of personal information of targeted individuals and groups;
  • introduce a cessation notice regime to tackle doxxing with extra-territorial reach; and
  • substantially expand the investigation and enforcement powers of the Privacy Commissioner for Personal Data (the Commissioner), in contexts beyond doxxing.

In our publication, we consider what these changes may mean for businesses handling personal data from Hong Kong.