PCPD Model Personal Data Protection Framework for AI (2024): requirements, deadlines and compliance actions
Artificial Intelligence: Model Personal Data Protection Framework
What is PCPD Model Personal Data Protection Framework for AI (2024)?
Published 11 June 2024, the framework gives organisations that procure, implement and use AI systems involving personal data recommendations in four areas: AI strategy and governance (an AI governance committee, procurement due diligence), risk assessment and human oversight (a risk-based approach with levels of human involvement), customisation and implementation of AI models (data preparation, testing, security), and communication and engagement with stakeholders (transparency, explainability, opt-out, feedback). It builds on the 2021 Guidance on the Ethical Development and Use of AI.
Who does it apply to?
Voluntary for organisations in Hong Kong deploying AI with personal data; compliance with the Personal Data (Privacy) Ordinance remains mandatory.
- Sectors
- Cross-sector / all sectors
When do the requirements apply?
Dates are taken from the linked official source; a reviewer should confirm in-force and application dates before relying on them.
Official sources
-
Artificial Intelligence: Model Personal Data Protection Framework
PCPD · 11 Jun 2024 · Tier 1 source
Change history
Record version 1: Added in the September 2026 global coverage expansion from the official source listed; reviewer to confirm dates, status and scope against the source text.. Full edit history is in the GitHub repository.
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.