Hong Kong · Privacy & Data Protection

The country's own data-protection regime, registration duties, and its official supervisory authority.

AI-drafted, editorially reviewed. Confirm specifics with the official authority.

Personal data is governed by the Personal Data (Privacy) Ordinance (PDPO), regulated by the Privacy Commissioner for Personal Data (PCPD). The Ordinance is built around six Data Protection Principles covering collection, accuracy and retention, use, security, openness and data-subject access. Doxxing is a criminal offence and the Commissioner has statutory investigation and cessation powers.

  • The six Data Protection Principles are the operative structure of the PDPO.
  • Data subjects can request access to and correction of their personal data.
  • Doxxing is a criminal offence, and the PCPD can investigate and order cessation.

Government portals

This topic in other countries

← Back to Hong Kong