Gabriela Kennedy delivered a seminar titled “Personal Data Privacy Laws in Hong Kong” to a property developer on 15 January 2020.
Gabriela focused on issues highlighted by the client as being of interest to the audience given their business operations. She explained basic concepts underpinning the legislation such as what constitutes personal data, the key concept of ‘collection of data’ and the six data privacy principles, using real life examples. She touched upon issues relating to compliance with a Data Access Request (DAR) and a Data Correction Request and explained when exemptions can be invoked. Gabriela then explored the data privacy issues with respect to CCTV usage and transfer, and shared some practical tips on the measures that align with the Privacy Commissioner for Personal Data’s (PCPD) guidance. She also highlighted the importance of erasure of recorded footage drawing on a real case the client faced and that our office handled. Moving on, she explained the difference between data users and data processors and highlighted the importance of contractual provisions surrounding security of data given the liability of data users for the actions of their processors under Personal Data (Privacy) Ordinance (Cap. 486).