Personal Data (Privacy) Ordinance (PDPO) - Hong Kong

The Personal Data (Privacy) Ordinance (PDPO) is Hong Kong’s principal data protection legislation governing the collection, holding, processing, and use of personal data by public and private organisations. The PDPO establishes six data protection principles covering collection limitation, accuracy, retention, transparency, security safeguards, and access rights. The law provides individuals with rights over their personal data, regulates direct marketing activities, and imposes compliance obligations on data users. The Privacy Commissioner for Personal Data (PCPD) oversees enforcement and promotes compliance with Hong Kong’s privacy framework.