Proposed enhancement of data privacy protection under the Personal Data (Privacy) Ordinance

Sam Wu, Beverly Fu • 7 May 2024

Sam Wu

Partner, Hong Kong

Beverly Fu

Associate, Hong Kong

Proposed enhancement of data privacy protection under the Personal Data (Privacy) Ordinance (the "PDPO")

The Office of the Privacy Commissioner for Personal Data, Hong Kong (the “PCPD”) oversees the enforcement of the Personal Data (Privacy) Ordinance (Chapter 486 of the laws of Hong Kong) (the “PDPO”), which protects individuals’ privacy in relation to personal data.

According to a recent meeting of the Panel on Constitutional Affairs on 19 February 2024 regarding background brief on the work of the PCPD, the PCPD is studying further amendments to the PDPO to enhance personal data protection.

The proposed amendments include establishing a mandatory data breach notification mechanism, requiring data users to have a data retention period policy and giving PCPD the power to impose administrative fines. The Panel on Constitutional Affairs will be consulted once a concrete proposal is formulated.

The summary below highlights some of the key aspects of the PDPO in relation to the proposed amendments advised by the PCPD.

YYC Legal LLP is in Association with East & Concord Partners (Hong Kong) Law Firm.

HKEX conclusions on review of Corporate Governance Code

by Rossana Chu, Dennis Yeung • 28 March 2025

HKEX enhanced requirements on board effectiveness, gender diversity, risk management and dividend policy are introduced to the 2,600 Hong Kong-listed companies, together with relevant additional disclosure obligations.

Paperless Corporate Communication for Hong Kong Companies

by Rossana Chu • 21 March 2025

The Companies Ordinance (Chapter 622 of the Laws of Hong Kong) has been amended to introduce an “implied consent mechanism” for both listed and unlisted Hong Kong incorporated companies to disseminate corporate communication by electronic means. The new mechanism will come into effect on 17 April 2025.