Hong Kong plans to revive privacy law requiring firms to report data breaches
Hong Kong’s privacy watchdog plans to consult lawmakers this year about introducing mandatory data breach reporting and related penalties, the body’s chief has said. Privacy Commissioner for Personal Data Ada Chung Lai-ling on Saturday revealed details about the proposed legislative amendments to the city’s privacy ordinance, after authorities stalled the plan in 2024 over concerns…
Hong Kong’s privacy watchdog plans to consult lawmakers this year about introducing mandatory data breach reporting and related penalties, the body’s chief has said.
Privacy Commissioner for Personal Data Ada Chung Lai-ling on Saturday revealed details about the proposed legislative amendments to the city’s privacy ordinance, after authorities stalled the plan in 2024 over concerns the measures could hurt the local business environment.
“We really hope that we have some specific recommendations this year, so we can consult the Legislative Council,” Chung said in a televised interview, adding the measures could be carried out in phases.
The government in 2024 put on hold a legislative reform to empower authorities to penalise companies for data breaches due to concerns that it might dampen the local business environment.
Erick Tsang Kwok-wai, the then secretary for constitutional and mainland affairs, said authorities could consider a “piecemeal approach” by first introducing minor improvements to minimise the impact on small businesses.
Chung said on Saturday the Office of the Privacy Commissioner for Personal Data was considering measures such as the mandatory reporting of data breaches and the introduction of administrative fines for such incidents.
