Hong Kong, China · Governance guidance

Hong Kong AI Data Protection Framework

The PCPD provides personal-data and governance recommendations for organisations procuring, customising, implementing and using AI systems.

Current status
Current guidance
Published or updated
11 June 2024
Last verified
19 August 2026

Prepared by Longan Bay Area AI Legal Research Center based on official public materials.

01

Scope of application & addressees

  • Organisations procuring, customising, implementing or using AI in Hong Kong
  • AI vendors and business teams processing personal data
  • People responsible for management oversight, risk assessment, system operation and communication

02

Core regulatory mandates & key requirements

01Establish an AI strategy and governance structure with clear management and role accountability.

02Conduct risk assessment and set the level of human oversight to match the risk.

03Govern customisation, implementation, data, testing and monitoring and communicate with stakeholders.

03

Enforcement & compliance timeline

The Model Framework was officially released.

Primary text

Statutory & regulatory text

PROJECT ENQUIRY

Need to evaluate this regulation against your system architecture?

Consult with our regulatory team →