Personal Data (Privacy) Law in Hong Kong: A Practical Guide on Compliance (Third Edition)

With an increasing concern of personal data privacy in Hong Kong and around the world, the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong publishes this third edition of Personal Data (Privacy) Law in Hong Kong: A Practical Guide on Compliance to provide practical guidance on the law of privacy, and the ways to protect personal data in everyday life.

This third edition will guide readers through the recent developments of personal data privacy in the local, regional and global contexts with updates on recent Administrative Appeals Board and Court decisions, and investigation reports and materials from the PCPD. In addition, some most-concerned issues are discussed, such as ethical development and use of AI, the collection and use of personal data by employers during COVID-19, data protection under work-from-home arrangements, data security measures for ICT systems, guidelines on doxxing offences and data breach handling. This book will certainly provide readers a comprehensive overview of current situation of personal data privacy issue.

Volume Editors
Ms Ada CHUNG Lai-ling
LL.B (Lond.), B.Soc.Sc. (HKU)
FCPA, FCCA, Accredited Mediator (HKMAAL)
Barrister-at-law (HKSAR, England and Wales and Australia)
Privacy Commissioner for Personal Data, Hong Kong, China
Professor Guobin ZHU
BA, MA, LL.M. (Renmin U, China), LL.M. (HKU)
PhD and Habilitation (Aix-Marseille U, France)
Titular Member of International Academy of Comparative Law
Professor, School of Law, City University of Hong Kong

Chapter 1 Introduction
Chapter 2 The Meaning of “Personal Data”
Chapter 3 The Meaning of “Collect”
Chapter 4 The Meaning of “Data User”
Chapter 5 Data Protection Principle 1
Chapter 6 Data Protection Principle 2
Chapter 7 Data Protection Principle 3
Chapter 8 Data Protection Principle 4
Chapter 9 Data Protection Principle 5
Chapter 10 Data Protection Principle 6(a) to (d) and the Data Access Provisions in Part 5
Chapter 11 Data Protection Principle 6(e) to (g) and the Data Correction Provisions in Part 5
Chapter 12 Exemption Provisions in Part 8
Chapter 13 The Commissioner’s Statutory Duties in Investigations
Chapter 14 Data Breach Handling and Notifications
Chapter 15 Criminal Offences
Chapter 16 Doxxing
Chapter 17 Cross-border Transfers of Personal Data from Hong Kong
Chapter 18 An Overview of the Mainland’s Personal Information Protection Regime
Appendix I Selected Case Notes on Court Judgments
Appendix II Major Differences between the PIPL, the GDPR and the PDPO
Appendix III Checklist for Data Users in Ensuring Compliance with the Ordinance
Appendix IV Data Subject’s Rights when his Personal Data Privacy is Infringed