# Artificial Intelligence: Model Personal Data Protection Framework

- **Record type**: Policy instrument
- **Jurisdiction**: Hong Kong SAR
- **Instrument type**: Guidance
- **Status**: Guidance
- **Binding**: No — guidance, strategy or standard
- **Issuing body**: Office of the Privacy Commissioner for Personal Data, Hong Kong
- **Adopted**: 2024-06-11

## In brief

PCPD Model Personal Data Protection Framework for AI (2024) is a non-binding guidance of Hong Kong SAR, issued by the Office of the Privacy Commissioner for Personal Data, Hong Kong. Its current status is guidance. Voluntary for organisations in Hong Kong deploying AI with personal data; compliance with the Personal Data (Privacy) Ordinance remains mandatory.

## Summary

Published 11 June 2024, the framework gives organisations that procure, implement and use AI systems involving personal data recommendations in four areas: AI strategy and governance (an AI governance committee, procurement due diligence), risk assessment and human oversight (a risk-based approach with levels of human involvement), customisation and implementation of AI models (data preparation, testing, security), and communication and engagement with stakeholders (transparency, explainability, opt-out, feedback). It builds on the 2021 Guidance on the Ethical Development and Use of AI.

## Scope

Voluntary for organisations in Hong Kong deploying AI with personal data; compliance with the Personal Data (Privacy) Ordinance remains mandatory.

## Notes on dates

Dates are taken from the linked official source; a reviewer should confirm in-force and application dates before relying on them.

## Provenance

- **Permanent id**: AIPT-POL-0086 (https://aipolicytracker.org/id/AIPT-POL-0086; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/policies/hong-kong-pcpd-model-personal-data-protection-framework-for-ai
- **Official source**: https://www.pcpd.org.hk/english/resources_centre/publications/files/ai_protection_framework.pdf
- **Source document**: Artificial Intelligence: Model Personal Data Protection Framework
- **Published by**: PCPD
- **Review status**: verified
- **Confidence**: high
- **Facts last confirmed**: 2026-09-26
- **Confirmed by**: Bhaskar Bhatt (see https://aipolicytracker.org/reviewers)
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "Artificial Intelligence: Model Personal Data Protection Framework" [AIPT-POL-0086, record version 1, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-POL-0086 (accessed 27 October 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.