Source: JD Supra

The law firm Mayer Brown reports that Hong Kong’s Privacy Commissioner for Personal Data (PCPD) completed a comprehensive round of compliance checks in February 2025 covering 60 organizations across sectors such as telecommunications, banking, insurance, retail, education, healthcare, and government. The review found that 80% of these organizations use AI in daily operations, with many employing multiple AI systems.

The PCPD emphasized the importance of AI governance structures, risk assessments, privacy impact assessments, and incident response plans tailored to AI-related risks. Data security measures including encryption, anonymization, and AI-specific alerts were widely implemented. No violations of the Personal Data (Privacy) Ordinance (PDPO) were found, but the PCPD recommended continuous monitoring, employee training, and transparency to ensure ongoing compliance. The PCPD’s Model Personal Data Protection Framework serves as a key guide for responsible AI deployment in Hong Kong.