Personal Data (Privacy) Law in Hong Kong: A Practical Guide on Compliance (Third Edition)

With an increasing concern of personal data privacy in Hong Kong and around the world, the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong publishes this third edition of Personal Data (Privacy) Law in Hong Kong: A Practical Guide on Compliance to provide practical guidance on the law of privacy, and the ways to protect personal data in everyday life.

This third edition will guide readers through the recent developments of personal data privacy in the local, regional and global contexts with updates on recent Administrative Appeals Board and Court decisions, and investigation reports and materials from the PCPD. In addition, some most-concerned issues are discussed, such as ethical development and use of AI, the collection and use of personal data by employers during COVID-19, data protection under work-from-home arrangements, data security measures for ICT systems, guidelines on doxxing offences and data breach handling. This book will certainly provide readers a comprehensive overview of current situation of personal data privacy issue.

隨著香港及世界各地對個人資料私隱的關注日漸增加，香港個人資料私隱專員公署出版了《香港個人資料（私隱）法：合規實用指南》第三版，就隱私法及在日常生活中保護個人資料的方法提供實用指導。

第三版將引導讀者了解本地、區域和全球背景下個人資料隱私的最新發展，包括最近的行政上訴委員會和法院的裁決以及來自 PCPD 的調查報告和資料。此外，會議還討論了一些最受關注的問題，例如人工智慧的道德發展和使用、雇主在新冠肺炎疫情期間對個人資料的收集和使用、在家辦公安排下的資料保護、ICT 系統的資料安全措施、有關網路犯罪的指南以及資料外洩處理等。本書必將為讀者提供個人資料隱私問題現況的全面概述。

Volume Editors
Ms Ada CHUNG Lai-ling
LL.B (Lond.), B.Soc.Sc. (HKU)
FCPA, FCCA, Accredited Mediator (HKMAAL)
Barrister-at-law (HKSAR, England and Wales and Australia)
Privacy Commissioner for Personal Data, Hong Kong, China
Professor Guobin ZHU
BA, MA, LL.M. (Renmin U, China), LL.M. (HKU)
PhD and Habilitation (Aix-Marseille U, France)
Titular Member of International Academy of Comparative Law
Professor, School of Law, City University of Hong Kong

Chapter 1 Introduction
Chapter 2 The Meaning of “Personal Data”
Chapter 3 The Meaning of “Collect”
Chapter 4 The Meaning of “Data User”
Chapter 5 Data Protection Principle 1
Chapter 6 Data Protection Principle 2
Chapter 7 Data Protection Principle 3
Chapter 8 Data Protection Principle 4
Chapter 9 Data Protection Principle 5
Chapter 10 Data Protection Principle 6(a) to (d) and the Data Access Provisions in Part 5
Chapter 11 Data Protection Principle 6(e) to (g) and the Data Correction Provisions in Part 5
Chapter 12 Exemption Provisions in Part 8
Chapter 13 The Commissioner’s Statutory Duties in Investigations
Chapter 14 Data Breach Handling and Notifications
Chapter 15 Criminal Offences
Chapter 16 Doxxing
Chapter 17 Cross-border Transfers of Personal Data from Hong Kong
Chapter 18 An Overview of the Mainland’s Personal Information Protection Regime
Appendix I Selected Case Notes on Court Judgments
Appendix II Major Differences between the PIPL, the GDPR and the PDPO
Appendix III Checklist for Data Users in Ensuring Compliance with the Ordinance
Appendix IV Data Subject’s Rights when his Personal Data Privacy is Infringed