Hong Kong Privacy Commissioner for Personal Data (PCPD) Allan Chiang has published a leaflet with information on new legal obligations for data users outsourcing the processing of personal data to third parties. A PCPD press release outlines the contents of the leaflet, including obligations of data users, ways to comply with the requirements, good practice recommendations and redress for data subjects. Chiang also said that while he “would like to have the power to directly regulate the data processors and sub-contracting activities,” the administration opted for indirect regulation. “We may need to consider reviewing the effectiveness of this indirect regulation approach in due course,” Chiang said.
Full Story