Hello, privacy pros. It was great to reconnect with old friends at the IAPP Global Privacy Summit in Washington, D.C., and meet some new faces too. Back from Summit, brimming with joy and excitement, I'm diving back into the usual busy life as a privacy lawyer in Beijing.

In recent weeks, China issued several new regulations easing cross-border data transfers and opening up certain telecom services to foreign investment. The

Artificial intelligence remains a hot topic this spring in China. The CAC recently greenlit a batch of generative AI services under China's Generative AI Regulation. A total of 117 generative AI services passed the CAC filing, with some well-known Chinese brands such as Baidu and Vivo included. Meanwhile, a special campaign launched by the CAC targeting fraud, misinformation and personal information infringement caused by AI-generated content is on the horizon.

In Hong Kong, the Privacy Commissioner for Personal Data is stepping up action for personal data protection. A recent enforcement notice slapped Hong Kong Cyberport Management Company for a data breach affecting over 13,000 individuals. Recommendations include beefing up cybersecurity frameworks, conducting timely risk assessments and security audits and promptly deleting personal data.

Simultaneously, the Hong Kong government is driving digital economy development. At the Visionary Forum of the Digital Economy Summit 2024, the financial secretary highlighted plans to bolster digital policies, improve infrastructure, facilitate data flows, expedite transformation, and nurture talent. The Greater Bay Area policy, involving Guangdong, Hong Kong and Macau, is in the works and expected to unlock promising opportunities across finance, trade, medical technology, tourism, aviation, and professional services in the GBA.

Hope you have enjoyed this update. Until next time.