香港個人資料私隱專員公署（下稱「私隱專員公署」）負責監督《個人資料（私隱）條例》（香港法例第486章）（下稱「《私隱條例》」）的執行情況，該條例旨在保障與個人資料有關的個人私隱。

根據政製事務委員會最近於2024年2月19日的會議上就私隱專員公署的工作所發出的背景資料簡介，私隱專員公署現正研究進一步修訂《私隱條例》以加強對個人資料的保護。

擬議的修訂內容包括設立強製性資料外泄通報機製
、yaoqiuziliaoshiyongzhezhidinggerenziliaobaoliushixianzhengcejifuyusiyinzhuanyuangongshupanchuxingzhengfakuandequanli。yidanwanchengjuticaoandenidinghou，bianjianghuizhengxunzhengzhishiwuweiyuanhuideyijian。

以下摘要重點介紹了《私隱條例》中與私隱專員公署所提出的修訂建議有關的一些關鍵點。

Proposed Enhancement of Data Privacy Protection under the Personal Data (Privacy) Ordinance (the “PDPO”)

The Office of the Privacy Commissioner for Personal Data, Hong Kong (the “PCPD”) oversees the enforcement of the Personal Data (Privacy) Ordinance (Chapter 486 of the laws of Hong Kong) (the “PDPO”), which protects individuals’ privacy in relation to personal data. 

According to a recent meeting of the Panel on Constitutional Affairs on 19 February 2024 regarding background brief on the work of the PCPD, the PCPD is studying further amendments to the PDPO to enhance personal data protection. 

The proposed amendments include establishing a mandatory data breach notification mechanism, requiring data users to have a data retention period policy and giving PCPD the power to impose administrative fines. The Panel on Constitutional Affairs will be consulted once a concrete proposal is formulated.

The summary below highlights some of the key aspects of the PDPO in relation to the proposed amendments advised by the PCPD.