Privacy site map

    Where you've been:    Privacy o    Personal Data o o    Obligations o     Kit o o o o o
    Principles o o o o o o o o o o o o o     Meanings o o     Refusing o     HyperTexpert o
    Exemption o o o     Guide o      Internet Privacy o      Frequently Asked Questions o
    Law o o o o o o o o o o o o o o o o o o      G & A Home o

Site Map

PRIVACY HOME PAGE

PERSONAL DATA
                          described      defined
OBLIGATIONS
                          under the Ordinance
PRINCIPLES
                          The principles in outline
                          Principle 1 described & Ordinance text
                          Principle 2 described & Ordinance text
                          Principle 3 described & Ordinance text
                          Principle 4 described & Ordinance text
                          Principle 5 described & Ordinance text
                          Principle 6 described & Ordinance text
MEANINGS
                          selected, key interpretations
                          all interpretations defined in Part I
REFUSING
                          when you must & when you may refuse a data access request
EXEMPTION EXPERT
                          sample: is it personal data?
                          sample: is it exempt as it's for personal use only?
KIT
                          view of G&A Privacy Compliance Kit
                          contents of Preparing for Compliance section
                          contents of On-going Compliance section
                          contents of Responding to Data Subjects section
                          contents of Responding to the Commissioner section
GUIDE
                          to the Ordinance, an introduction
G&A HOME PAGE
FAQ
                          frequently asked questions
INTERNET PRIVACY
                          privacy and commerce on the Internet
LAW
                          introduction to complete text of the Ordinance
                          the hypertext Ordinance

Contents

PART I PRELIMINARY
1. Short title and commencement 2. Interpretation 3. Application 4. Data protection principles

PART II ADMINISTRATION
5. Establishment, etc. of Privacy Commissioner for Personal Data 6. Commissioner to hold no other office 7. Filling of temporary vacancy 8. Functions and powers of Commissioner 9. Staff of Commissioner, etc. 10. Delegations by Commissioner 11. Establishment of Personal Data (Privacy)

PART III CODES OF PRACTICE
12. Approval of codes of practice by Commissioner 13. Use of approved codes of practice in proceedings under this Ordinance

PART IV DATA USER RETURNS AND REGISTER OF DATA USERS
14. Data user returns 15. Register of data users 16. Inspection of register 17. Register shall not limit, etc. operation of this Ordinance

PART V ACCESS TO AND CORRECTION OF PERSONAL DATA
18. Data access request 19. Compliance with data access request 20. Circumstances in which data user shall or may refuse to comply with data access request 21. Notification of refusal to comply with data access request 22. Data correction request 23. Compliance with data correction request 24. Circumstances in which data user shall or may refuse to comply with data correction request 25. Notification of refusal to comply with data correction request, etc. 26. Erasure of personal data no longer required 27. Log book to be kept by data user 28. Imposition of fees by data user 29. Service and language of certain notices

PART VI MATCHING PROCEDURES AND TRANSFERS OF PERSONAL DATA, ETC
30. Matching procedure not to be carried out except with consent of data subject, etc. 31. Matching procedure request 32. Determination of matching procedure request 33. Prohibition against transfer of personal data to place outside Hong Kong except in specified circumstances 34. Use of personal data in direct marketing 35. Repeated collections of personal data in same circumstances

PART VII INSPECTIONS, COMPLAINTS AND INVESTIGATIONS
36. Inspections of personal data systems 37. Complaints 38. Investigations by Commissioner 39. Restrictions on investigations initiated by complaints 40. Commissioner may carry out or continue investigation initiated by complaint notwithstanding withdrawal of complaint 41. Commissioner to inform relevant data user of inspection or investigation 42. Power of entry on premises for the purposes of an inspection or investigation 43. Proceedings of Commissioner 44. Evidence 45. Protection of witnesses, etc. 46. Commissioner, etc. to maintain secrecy 47. Persons to be informed of result of inspection or investigation 48. Reports by Commissioner 49. Cases in which sections 47 and 48 shall not apply 50. Enforcement notices

PART VIII EXEMPTIONS
51. Interpretation 52. Domestic purposes 53. Employment - staff planning 54. Employment - transitional provisions 55. Relevant process 56. Personal references 57. Security, etc. in respect of Hong Kong 58. Crime, etc. 59. Health 60. Legal professional privilege 61. News 62. Statistics and research 63. Exemption from section 18(1)(a)

PART IX OFFENCES AND COMPENSATION
64. Offences 65. Liability of employers and principals 66. Compensation

PART X MISCELLANEOUS
67. Power of Commissioner to specify forms 68. Service of notices 69. Regulations - fees 70. Regulations - general 71. Amendment of Schedules 2, 4 and 6 Consequential amendments Prevention of Bribery Ordinance 72. Public bodies Administrative Appeals Board Ordinance 73. Schedule amended
Schedule 1 Data protection principles
Schedule 2 Finances, etc. of commissioner
Schedule 3 Prescribed information
Schedule 4 Provisions of Ordinances under which matching procedures are required or permitted
Schedule 5 Prescribed matters
Schedule 6 Warrants authorizing Privacy Commissioner for Personal Data to enter premises