Data Handling in Hong Kong
Data hk is a process of gathering and analysing information, either from primary sources like field observations or secondary sources, such as published reports. It can be used to create reports or statistics for businesses, market research or policy formation by government agencies. Data hk can also be used to identify trends or opportunities in the market, or to measure performance and make improvements.
A number of different methodologies can be used to gather data hk, including surveys and interviews. This data can then be analyzed and used to draw conclusions that can help businesses make informed decisions about their business strategies and operations.
The Hong Kong Personal Data Protection Policy (“PDPO”) governs personal data collection, processing, holding and use through six Data Protection Principles. It has been in effect since 20 December 1996 and has been amended several times, most recently in 2012 and 2021.
In Hong Kong, the definition of personal data is broad and encompasses any information that relates to an identifiable person. This is in line with international norms and is similar to the definition adopted by other legislative regimes, such as the Personal Information Protection Law that applies in mainland China and the General Data Protection Regulation that applies in the European Economic Area.
If an individual’s personal data is collected and used in Hong Kong, the PDPO requires that he or she be expressly informed on or before the collection of his or her personal data of its purpose and the classes of persons to whom it may be transferred. This is because transfer is a form of use.
An important point to remember is that a person’s obligations under the PDPO are triggered by his or her control over the collection, holding, processing or use of personal data in or from Hong Kong. This is unlike a number of other data privacy regimes that include a concept of extra-territorial application.
If an individual is not a data user in Hong Kong, his or her obligations under the PDPO do not arise. This is because personal data must only be transferred to a person outside Hong Kong if the original data user has obtained the voluntary and express consent of the individual. This is akin to the requirement that an individual must consent to have his or her name and HKID number displayed together on staff cards, and can only be made available to those who require it for work purposes.