Privacy Commissioner For Personal Data Publishes Guidance Note On Handling Customers' Personal Data For Banking Industry

Artificial Intelligence ("AI") is no longer the future on the horizon for businesses in Hong Kong, but the present-day reality. In just a few years, AI has moved from the margins of corporate operations to their core...

The HKMA announced that it had granted five stored value facility licences, which are the first set of such licences granted by the Hong Kong Monetary Authority under the new Payment Systems and Stored Value Facilities Ordinance.

Given the private nature of banking services and as banks serve the vast majority of the public, the banking industry is one of the private sectors in Hong Kong for which the Hong Kong Privacy Commissioner receives most complaints.

Section 33 of the Personal Data (Privacy) Ordinance prohibits the transfer of personal data to places outside Hong Kong except in circumstances specified in the PDPO.

In 2012 Hong Kong introduced the Personal Data Ordinance to, amongst other things, strengthen restrictions on the use of personal data for direct marketing purposes.

The Privacy Commissioner for Personal Data, Hong Kong has released guidelines for employers on the collection and use of personal data arising from the pandemic. The guidelines include the following...

Part VIA of the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO) sets out new direct marketing requirements. Part VIA will tentatively commence on 1 April 2013.

Recent high profile data privacy breaches have brought the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") under the spotlight. Hong Kong was one of the first countries in Asia

On August 22, the Privacy Commissioner issued a Media Statement announcing two charges against a telecommunications company under the Personal Data (Privacy) Ordinance ...

It is very common for employers to install some forms of employee monitoring devices in the work place, e.g. hidden video cameras, surveillance software in respect of the usage of email and access to the Internet as well as the recording of telephone calls.

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho

On December 3, a federal court in the Central District of California granted plaintiffs' request for preliminary approval of a proposed $22 million settlement ...

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market

The IRS has proposed new regulations that would impose nondiscrimination requirements on private schools seeking to maintain their tax-exempt status under section 501(c)(3). These regulations would prohibit policies discriminating on the basis of race, color, or national or ethnic origin in admissions, financial assistance, and other school programs. The proposed rules raise important questions about how private schools can structure their programs while complying with federal tax law requirements.

On July 16, plaintiffs in a putative class action filed a motion for preliminary approval of their settlement agreement with a video game ...