Data Governance in Hong Kong

Data hk is the collection and organization of information obtained through observations, measurements or research and organized into tables. It serves an integral function in our society such as weather forecasts, banking transactions and health care; its analysis can reveal trends or patterns which help businesses and governments make better decisions and understand risks related to their operations.

Data users in Hong Kong or from Hong Kong who control the collection, holding, processing or use of personal data must fulfill various statutory obligations such as those contained within the six core DPPs – this may include informing data subjects of how their personal data will be used and any classes of recipients it may be transferred to; where personal data transfers for direct marketing purposes occur as part of this use obligation to provide PICSs and transfer only for specific purposes applies as an obligation on data users.

Data governance programs involve numerous stakeholders – employees, customers and partners alike. When opinions diverge among these diverse constituencies, managing them effectively can be challenging. Achieve success requires strong communication, clear roles and responsibilities and an organization structure to ensure everyone involved contributes when needed. A great starting point would be a responsibility assignment matrix such as the RACI model (Responsible, Accountable Consulted Inform) for project teams – assigning roles based on specific skillsets/attributes which helps teams deliver value to their customers more quickly.

Cross-border transfers of personal data present one of the gravest threats to privacy. While most jurisdictions such as Hong Kong have stringent regulations regarding collection and protection of such information, some companies choose to send this data outside their country of residence in order to further a business interest – with potentially serious and criminal repercussions as a result of these decisions.

BMW announced on March 21, that their electronic car drivers experienced a data breach which involved their personal information being sent to an unauthorised recipient by hackers, including names, emails addresses, dates of birth, postal codes, phone numbers and driving license numbers. BMW issued an apology and informed all affected customers of this security incident.

As is typical in such incidents, the Hong Kong watchdog is conducting an investigation into how and whether any laws were broken during this breach. They stated they will collaborate with BMW to decide on any further actions necessary. Meanwhile, some customers were unhappy with BMW’s response; one 57-year-old who owns two BMW iX electric cars told Hong Kong Free Press he found their failure to notify him about the breach unacceptable and has requested for investigation by Hong Kong’s privacy watchdog.