Personal Data (Privacy) Ordinance Cap 486 of Hong Kong SAR is one of Asia oldest comprehensive data protection laws (passed 1995, in force December 1996). It applies to data users who control collection holding processing or use of personal data (broadly defined) about identifiable living individuals in or from Hong Kong, regardless of medium. Origins: 1994 Law Reform Commission Report Reform of the Law Relating to the Protection of Personal Data, based on OECD Privacy Guidelines 1980. Establishes Privacy Commissioner for Personal Data (PCPD) as independent statutory authority. Six Data Protection Principles (DPPs) in Schedule 1 form the normative core covering full data lifecycle. Major 2012 amendments introduced direct marketing prescribed consent regime (Sections 35A-N), creation of data protection officer recommendation, criminal penalties for misuse, processor oversight obligations. Major 2021 amendments (Personal Data (Privacy) (Amendment) Ordinance 2021) introduced anti-doxxing regime: criminalisation of doxxing acts (Sections 64A-D), conferring on PCPD statutory powers to issue cessation notices demanding removal or restriction of disclosure of doxxing content, extraterritorial reach. 2024-2025 pipeline: mandatory data breach notification + administrative fines + cross-border transfer activation of Section 33 + AI governance (Model Personal Data Protection Framework for Generative AI June 2024). Coordinates with mainland China PIPL + DSL + CSL (verified separately) + Macao Personal Data Protection Act Law 8/2005 + APEC Cross-Border Privacy Rules (CBPR) + Global CBPR Forum (verified separately). HK PDPO scope + history + 2012 amendments + 2021 doxxing amendments + 2024-2025 pipeline applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.