{"slug":"hong-kong-pcpd-model-personal-data-protection-framework-for-ai","title":"Artificial Intelligence: Model Personal Data Protection Framework","short_title":"PCPD Model Personal Data Protection Framework for AI (2024)","jurisdiction":"hong-kong","instrument_type":"guidance","status":"guidance","is_binding":false,"issuing_body":"Office of the Privacy Commissioner for Personal Data, Hong Kong","summary_plain":"Published 11 June 2024, the framework gives organisations that procure, implement and use AI systems involving personal data recommendations in four areas: AI strategy and governance (an AI governance committee, procurement due diligence), risk assessment and human oversight (a risk-based approach with levels of human involvement), customisation and implementation of AI models (data preparation, testing, security), and communication and engagement with stakeholders (transparency, explainability, opt-out, feedback). It builds on the 2021 Guidance on the Ethical Development and Use of AI.","adopted_on":"2024-06-11","in_force_on":null,"applies_from":null,"official_source_url":"https://www.pcpd.org.hk/english/resources_centre/publications/files/ai_protection_framework.pdf","last_verified_at":null,"review_status":"pending_review","confidence_level":"high","updated_at":"2026-09-11T14:53:02+00:00","url":"https://aipolicytracker.org/policies/hong-kong-pcpd-model-personal-data-protection-framework-for-ai","status_note":null,"scope_summary":"Voluntary for organisations in Hong Kong deploying AI with personal data; compliance with the Personal Data (Privacy) Ordinance remains mandatory.","who_it_applies_to":null,"key_dates_summary":null,"penalties_summary":null,"what_organizations_must_do":null,"published_on":null,"date_notes":"Dates are taken from the linked official source; a reviewer should confirm in-force and application dates before relying on them.","taxonomy":{"actor":["provider","deployer"],"sector":["cross_sector"],"use_case":["generative_ai","customer_service"]},"sections":[],"obligations":[],"applicability_rules":[],"deadlines":[],"versions":[],"enforcement_events":[],"procurement_rules":[],"sources":[{"title":"Artificial Intelligence: Model Personal Data Protection Framework","publisher":"PCPD","url":"https://www.pcpd.org.hk/english/resources_centre/publications/files/ai_protection_framework.pdf","document_date":"2024-06-11","document_type":"guidance","tier":1,"tier_label":"Official primary source (government, legislature, regulator, court, standards body, intergovernmental)"}],"related_policies":[],"related_frameworks":[],"faq":[],"source":{"official_source_url":"https://www.pcpd.org.hk/english/resources_centre/publications/files/ai_protection_framework.pdf","source_title":"Artificial Intelligence: Model Personal Data Protection Framework","source_publisher":"PCPD","source_document_date":"2024-06-11","source_reference":null,"source_tier":1,"last_checked_at":"2026-09-11","last_verified_at":null,"review_status":"pending_review","confidence_level":"high","content_version":1,"change_summary":"Added in the September 2026 global coverage expansion from the official source listed; reviewer to confirm dates, status and scope against the source text.","reviewed_by":null}}