Hong Kong. Data localisation / cross-border. Guidelines / standard contract
GBA Standard ContractStandard Contract for Cross-boundary Flow of Personal Information within the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland, Hong Kong)
In force
Partly verified
Medium confidence.Launch date (Dec 2023) from general knowledge; extension to all sectors from Nov 2024 confirmed by DLA Piper. [Link: official English text on PCPD (bot-check on direct fetch; confirmed in search results)]
§1Summary
- Synopsis
A voluntary simplified contract mechanism for personal information flows between nine Mainland GBA cities and Hong Kong. It lets parties use a filed template instead of the full PIPL export routes for qualifying flows.
- Key themes
- Unique features
Region-specific transfer mechanism bridging PIPL and the PDPO.
- SaaS relevance
SaaS groups with Shenzhen/Guangzhou and Hong Kong entities can use it for intra-GBA PI flows.
§2Obligations
- Cross-border transfers
- Voluntary template with filing
§3Dates
- Key dates
- Adopted
- In force
- Extended to all sectors from November 2024
§4Text and authority
- Text
- Authoritative text pcpd.org.hk
- Authority
- PCPD / Innovation, Technology and Industry Bureau with CAC
§5Where it applies
- Domestic law of
- Hong Kong
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence.Launch date (Dec 2023) from general knowledge; extension to all sectors from Nov 2024 confirmed by DLA Piper. [Link: official English text on PCPD (bot-check on direct fetch; confirmed in search results)]