Regulations › Rest of world › Hong Kong SAR
PDPO
Personal Data (Privacy) Ordinance (Cap. 486)
WhenIn effect since 20 December 1996
Who enforces itOffice of the Privacy Commissioner for Personal Data (PCPD)
Who it applies toAny person who controls the collection, holding, processing or use of personal data in or from Hong Kong.
Tell the regulatorNo mandatory notification
DPO requiredNo DPO requirement
RegistrationData user return scheme exists but has not been activated for any class of data user
Transfers abroadNo transfer restriction in force
Request deadlineComply with a data access request within 40 days
Maximum fineCriminal fines up to HKD 1,000,000 (about USD 128k) for doxxing causing harm or selling data f…
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws