The Personal Data (Privacy) Ordinance establishes data protection principles for personal data collected in Hong Kong. It covers any data relating to living individuals that can identify them. The Ordinance requires data to be collected lawfully and for authorized purposes, kept accurate and not retained longer than necessary. It provides rights for individuals to access and correct their personal data. Exemptions exist for domestic and employment data as well as where access could harm security, crime prevention or other public interests. Non-compliance with the Ordinance's enforcement notices is a criminal offense.

1. Introduction to the Personal Data (Privacy) Ordinance

7. DATA PROTECTION PRINCIPLES [Schedule 1]

10. Personal Information Collection Statement (PICS)