The Hong Kong Office of the Privacy Commissioner for Personal Data Published Guidance on Personal Data Protection in Cross-Border Data Transfer

The Guidance will assist organisations to prepare for the eventual implementation of section 33 and enhance privacy protection for cross-border data transfer. It helps organisations understand their compliance obligations under section 33. In particular, the PCPD has prepared a set of recommended model data transfer clauses to assist organisations in developing their cross-border data transfer agreement with the overseas data recipients. Organisations are encouraged to adopt the practices recommended in the Guidance as part of their corporate governance responsibility even before section 33 takes effect. Read the Guidance and the Recommended Model Clauses.