Hong Kong. Sectoral privacy. Ordinance (amendment)
PDPO Doxxing AmendmentPersonal Data (Privacy) (Amendment) Ordinance 2021
Partly verified
Medium confidence.Exact gazettal/commencement days from general knowledge; source confirms October 2021 commencement. [Link: official English enacted Ordinance (Ord. No. 32 of 2021, LegCo copy); consolidated text in Cap. 486 on elegislation.gov.hk]
§1Summary
- Synopsis
Creates two-tier criminal offences for disclosing personal data without consent with intent or recklessness as to harm (doxxing). It gives the PCPD powers to investigate, prosecute and serve cessation notices on platforms, including those outside Hong Kong.
- Key themes
- Unique features
Cessation notices can be served on overseas online platforms serving Hong Kong users.
- SaaS relevance
Platforms hosting user content accessible in Hong Kong may receive PCPD takedown (cessation) notices.
§2Obligations
- Extraterritorial
- Yes
- Maximum penalty
- HK$1m and 5 years where harm caused; non-compliance with cessation notice HK$50k–100k and 2 years
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text legco.gov.hk
- Authority
- Office of the Privacy Commissioner for Personal Data (PCPD)
§5Where it applies
- Domestic law of
- Hong Kong
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Exact gazettal/commencement days from general knowledge; source confirms October 2021 commencement. [Link: official English enacted Ordinance (Ord. No. 32 of 2021, LegCo copy); consolidated text in Cap. 486 on elegislation.gov.hk]