Skip to content

Hong Kong's personal data law given new teeth - what they mean for businesses

The Personal Data (Privacy) (Amendment) Ordinance 2021 (the Ordinance) came into effect on 8 October 2021.

It amends the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO), particularly to:

  • criminalise doxxing, i.e. unconsented disclosure of personal information of targeted individuals and groups;
  • introduce a cessation notice regime to tackle doxxing with extra-territorial reach; and
  • substantially expand the investigation and enforcement powers of the Privacy Commissioner for Personal Data (the Commissioner), in contexts beyond doxxing.

In our publication, we consider what these changes may mean for businesses handling personal data from Hong Kong.