HK PDPO operates under One Country Two Systems separation from mainland China data protection regime (PIPL + DSL + CSL all verified separately in this corpus). Coordination interfaces: Greater Bay Area (GBA) Standard Contract Pilot for HK-mainland cross-border transfers (2024) reducing CAC Standard Contract burden for participating GBA organisations; APEC Cross-Border Privacy Rules (CBPR) participation maintained through APEC + Global CBPR Forum (verified separately); coordination with Macao Law 8/2005 Personal Data Protection Act. PCPD Model Personal Data Protection Framework for Generative AI June 2024 establishes 4 areas: governance + risk assessment + customisation + training + maintenance + management + communication; recommends generative AI PIA, transparency on AI use in PPS, AI training data DPP1 evaluation, AI output accuracy DPP2 + bias, AI security DPP4. Pending 2024-2025 PDPO amendments under consultation: mandatory data breach notification (statutory timeframe + threshold + form), administrative fines (PCPD may impose civil monetary penalties currently limited), strengthened cross-border + Section 33 activation, AI-specific obligations, retention regime. PCPD Cybersecurity Roadshow + Privacy Awareness Week + DPO Club + research + international engagement (APPA + Global Privacy Assembly + Asia-Pacific Privacy Authorities). HK PDPO coordination + 2024 AI framework + pending 2025 mandatory breach + administrative fines applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.