On 20 January 2020, the Constitutional and Mainland Affairs
Bureau (CMAB) together with the Privacy
Commissioner for Personal Data (Privacy
Commissioner), published a consultation paper raising
important data protection issues and proposing possible amendments
to the Personal Data (Privacy) Ordinance (Cap. 486)
(PDPO), after having reviewed the existing data
protection regime in Hong Kong. These include possibly introducing
a mandatory data breach notification mechanism, requiring data
users to specify a retention period for personal data collected,
raising the sanctioning powers of the Privacy Commissioner as well
as potentially making data processors more accountable.
The consultation paper seeks feedback from members of the
Legislative Council and we expect that more specific proposals for
reforms to the PDPO will be made in due course. The consultation
paper did not indicate an express timeframe for the completion of
this review process or when specific
