Governs the collection, use, and transfer of personal data by data users in Hong Kong.
14
Rules extracted
155
Obligations decomposed
11.1x
Avg obligations per rule
🇭🇰 Hong Kong SAR
Jurisdiction
The PDPO was enacted in 1995 and took effect on 20 December 1996, making it one of Asia's earliest comprehensive data protection laws. Modelled on the OECD Privacy Guidelines (1980), the Ordinance is technology-neutral and principle-based. It establishes six Data Protection Principles (DPPs) in Schedule 1, regulates cross-border data transfers, imposes direct marketing controls (amended 2012), creates data access and correction rights, and empowers the Privacy Commissioner for Personal Data (PCPD) as regulator. Major amendments in 2021 introduced anti-doxxing provisions with criminal penalties. The PDPO applies to both public and private sectors in Hong Kong.
Source
1
Regulation
Extracted
14
Rules
Decomposed
155
Obligations
Decomposition ratio
Each rule is decomposed into an average of 11.1 atomic obligations — the smallest testable units that can be independently violated.
Fully extracted & scored
All 155 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.
Every obligation in PDPO is scored across independent risk dimensions:
Obligation Weight
How critical within the regulatory framework
Violation Likelihood
How often breached in practice
Enforcement Evidence
Regulator enforcement history and penalties
Cascade Dependency
How many obligations depend on this one
Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for PDPO — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.
High-level commitments and governance framework covering PDPO requirements.
Step-by-step operational procedures to implement each policy commitment.
Ready-to-use forms, registers, and checklists for day-to-day compliance operations.
Combine PDPO with other regulations into a single unified compliance pack for your business.
Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.
Your document is scored against every obligation in PDPO. Each claim is mapped to the obligation tree and evaluated for coverage.
Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.
16 rules, 260 obligations
9 rules, 135 obligations
29 rules, 203 obligations
10 rules, 32 obligations
10 rules, 41 obligations
19 rules, 200 obligations
46 rules, 572 obligations
8 rules, 201 obligations
Upload your document and get a risk-scored gap analysis against 155 PDPO obligations in under 5 minutes.