An Overview of Hong Kong Artificial Intelligence: Model Personal Data Protection Framework

The Hong Kong Privacy Commissioner's Office published the "Guidance on the Ethical Development and Use of AI" in August 2021, urging organizations handling personal data with AI systems to adopt ethical principles. The emergence of AI systems, such as Large Language Models (LLMs), has prompted several small and medium-sized enterprises to purchase AI solutions from vendors rather than build them from scratch.

In response to recent AI developments, the Hong Kong Privacy Commissioner's Office released the "Artificial Intelligence: Model Personal Data Protection Framework" on June 11, 2024. This framework provides best practice recommendations for organizations handling personal data, particularly those procuring AI solutions from third-party developers or vendors and those customizing or operating AI systems, including generative and predictive AI systems.

This whitepaper provides an overview of the Model Framework and elaborates on the application of ‘Ethical Principles for AI’ and three ‘Data Stewardship Values’ for organizations handling personal data. It also addresses compliance obligations under the Hong Kong Personal Data Protection Ordinance (PDPO) and details recommended measures. Learn how Securiti helps ensure swift compliance with the Model Framework.