Data Hong Kong – Principles of Data Protection

data hk

Data hk provides market data and news for Hong Kong securities market. As the premier source for stock quotes, historical prices, earnings reports and announcements.

Data and information play an essential part in our lives both professionally and leisurely. They serve a multitude of functions, such as improving economic efficiency, public services, consumer protection and national security. At the same time, privacy has become a critical concern for many. Data hk seeks to raise awareness and foster best practices around data collection, processing and usage; encouraging organizations to adopt six data principles to minimize business risk while meeting data transfer requirements efficiently.

The Personal Data Protection Ordinance (PDPO) stipulates that personal data should only be collected lawfully and for a lawful purpose without exceeding what is necessary to meet that purpose. Unfortunately, its interpretation has often been up for discussion; many activities don’t fall under this principle – for instance taking pictures at concerts may not constitute collecting personal data unless specific identifiers like names are included within them (see photo of concert attendees for instance).

Other principles under debate include the need for data subjects to provide their consent before collecting their personal data and providing notice as to the purposes for which their data will be used. These obligations can typically be fulfilled via a Personal Information Collection Statement (PICS), which must contain clear and concise information about why it was collected as well as which categories of people it could be given out to.

Another notable element of the PDPO relates to its extraterritorial reach. Many jurisdictions now enact some form of equivalent regime requiring measures be implemented by foreign data privacy regimes to ensure they provide similar levels of protection as that provided by PDPO; however, no such regime currently exists in Hong Kong (despite advocates calling for change by PCPD).

It would not be unreasonable for data importers to agree to the standard contractual clauses of an EEA data exporter when transferring personal data of individuals from the EEA to Hong Kong, and contribute to a transfer impact assessment in these instances. Measures could include encryption, anonymization or pseudonymisation technology as well as contractual provisions mandating auditing inspection reporting beach notification compliance support co-operation support & co-operation support of compliance support services provided.