Skip to content

Regulation Tracker / Hong Kong

Artificial Intelligence: Model Personal Data Protection Framework

Office of the Privacy Commissioner for Personal Data, Hong Kong

last revised 2024-06-11last verified 2026-09-041 versioncountry page →

GuidanceIn forceRisk classificationConfidentialitySupervisionRecord-keeping

map categories:Data protection and legal AIVendor due diligenceClient data in AI tools

Published on 11 June 2024, the PCPD's Model Framework gives organisations that procure, implement and use AI, including generative AI, recommendations for complying with the Personal Data (Privacy) Ordinance. It builds on the PCPD's 2021 guidance on the ethical development and use of AI and is structured in four parts.

Applies to
firms, providers, all
Effective
11 Jun 2024
Current version
Original · 11 Jun 2024
Last verified
04 Sept 2026
Official text
www.pcpd.org.hk/english/resources_centre/publications/files/ai_protect…

What the document requires

  • Part I: establish AI strategy and governance, including governance considerations for procuring AI solutions, an AI governance committee, and employee training.
  • Part II: conduct risk assessment and set the level of human oversight using a risk-based approach.
  • Part III: prepare and manage data for customisation and use of AI systems, and test, validate and continuously monitor the systems.
  • Part IV: communicate and engage with stakeholders, including information provision, data subject rights and explainable AI.

Version history

VersionDateWhat changedSource
Originalcurrent2024-06-11First version recorded.official

Sources

Cite this record

SafeLegalAI Legal AI Regulation Tracker, "Artificial Intelligence: Model Personal Data Protection Framework" (Office of the Privacy Commissioner for Personal Data, Hong Kong, Original, 2024-06-11), safelegalai.com/regulation/hong-kong/hk-pcpd-ai-model-personal-data-protection-framework (accessed 2026-09-04). Data: CC BY 4.0.

More official documents in Hong Kong