# Hong Kong PCPD publishes the Model Personal Data Protection Framework for AI

- **Record type**: Change log entry
- **Occurred on**: 2024-06-11
- **Jurisdiction**: Hong Kong SAR
- **Instrument**: Artificial Intelligence: Model Personal Data Protection Framework
- **Impact level**: Routine
- **Status after the change**: Guidance

## What changed

The Privacy Commissioner issued recommendations for organisations procuring and deploying AI with personal data, covering governance, risk assessment and human oversight, model customisation and stakeholder communication.

## What it means in practice

Voluntary, but the PCPD checks against it in compliance reviews; organisations should set up an AI governance committee and risk-based oversight.

## Provenance

- **Record page**: https://aipolicytracker.org/changes/2024-06-11-hong-kong-pcpd-ai-framework
- **Official source**: https://www.pcpd.org.hk/english/resources_centre/publications/files/ai_protection_framework.pdf
- **Source document**: Artificial Intelligence: Model Personal Data Protection Framework
- **Published by**: PCPD
- **Review status**: verified
- **Confidence**: high
- **Facts last confirmed**: 2026-09-26
- **Confirmed by**: AI Policy Tracker (see https://aipolicytracker.org/reviewers)
- **Retrieved**: 2026-09-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.