hk
The Hong Kong government is exploring changes to the current Data Protection Policy (PDPO). One change mooted is an expansion of the definition of personal data. This would mean that the information a business processes about an individual would need to concern that person in order to be classed as personal data. This could significantly increase compliance requirements for businesses that use data. For example, the combination of information on a staff card that exhibits a person’s name, company name, photograph and employee number is likely to qualify as personal data under the PDPO and require appropriate measures. The same would apply to any other information a business collects that will impact an individual. If you’re unsure about your obligations under the PDPO, you should seek advice from an experienced professional.