Personal Data (Privacy) Ordinance, transfer of personal data outside Hong Kong
Personal Data (Privacy) Ordinance (Cap. 486), s. 33
A cross border transfer rule binding public and private bodies.
- Obligation class
- Transfer, Consent
As of .
What it requires
- Do not transfer personal data to a place outside Hong Kong unless the place is specified in a Gazette notice, you have reasonable grounds to believe a substantially similar law is in force there, the data subject consented in writing, or another condition in section 33(2) applies (section 33(2)).
These lines are LexLint's reading of the law's text, as of .
What this law does
Section 33 would bar a data user from transferring personal data to a place outside Hong Kong unless the place is specified by the Commissioner in a Gazette notice, the user believes on reasonable grounds that a substantially similar law is in force there, the data subject has consented in writing, or one of the other listed conditions applies. Section 33 is not yet in operation.
When LexLint raises it
When your app profile says your app processes personal data.