Chapter 1 Introduction

Chapter 2 The Meaning of “Personal Data”

Chapter 3 The Meaning of “Collect”

Chapter 4 The Meaning of “Data User”

Chapter 5 Data Protection Principle 1

Chapter 6 Data Protection Principle 2

Chapter 7 Data Protection Principle 3

Chapter 8 Data Protection Principle 4

Chapter 9 Data Protection Principle 5

Chapter 10 Data Protection Principle 6(a) to (d) and the Data Access Provisions in Part 5

Chapter 11 Data Protection Principle 6(e) to (g) and the Data Correction Provisions in Part 5

Chapter 12 Exemption Provisions in Part 8

Chapter 13 The Commissioner’s Statutory Duties in Investigations

Chapter 14 Data Breach Handling and Notifications

Chapter 15 Criminal Offences

Chapter 16 Doxxing

Chapter 17 Cross-border Transfers of Personal Data from Hong Kong

Chapter 18 An Overview of the Mainland’s Personal Information Protection Regime

Appendix I Selected Case Notes on Court Judgments

Appendix II Major Differences between the PIPL, the GDPR and the PDPO

Appendix III Checklist for Data Users in Ensuring Compliance with the Ordinance

Appendix IV Data Subject’s Rights when his Personal Data Privacy is Infringed