Document background
This General Privacy Notice serves as a fundamental document for organizations operating in Hong Kong that collect, process, or handle personal data. It is designed to comply with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and guidelines issued by the Privacy Commissioner for Personal Data (PCPD). The document is essential for establishing transparency in data handling practices and maintaining compliance with Hong Kong's data protection regime. It should be implemented by organizations before they begin collecting personal data and should be regularly reviewed and updated to reflect changes in data processing activities or regulatory requirements. The notice includes mandatory disclosures about data collection purposes, data subject rights, and data handling practices, while also addressing specific requirements such as direct marketing consent and cross-border data transfers where applicable.
