Hong Kong: Closed PCPD Investigations into the Impact of the Development or Use of Artificial Intelligence on Personal Data Privacy

On 21 February 2024, the Office of the Privacy Commissioner for Personal Data (PCPD) concluded investigations into 28 local organisations. The investigations, conducted from August 2023 to February 2024, aimed to identify the implications of Artificial Intelligence (AI) development and use on personal data privacy. The investigations covered various sectors, including telecommunications, finance and insurance, retail, transportation, education, and government departments. The PCPD found that 21 organisations used AI in their operations, 19 of which had established internal AI governance frameworks. Only 10 of these organisations collected personal data through AI products and services, all of which implemented appropriate security measures. The PCPD found no contravention of the Personal Data (Privacy) Ordinance (PDPO) during the compliance check process.