The Personal Data (Privacy) Ordinance (PDPO) is Hong Kong’s primary personal-data protection law, overseen by the Privacy Commissioner for Personal Data (PCPD).

For cybersecurity and AI security programmes, PDPO matters whenever systems process personal data — including GenAI tools, CRM exports, and automated decisions. See Hong Kong data privacy wiki and PDPO updates for the AI era (news).