An Overview of Hong Kong Artificial Intelligence: Model Personal Data Protection Framework

Products

Data Command Center
View

Data+AI Security Teams

Data+AI Teams

Data Governance Teams

Data Privacy Teams

Secure Data+AI anywhere

Data Security Posture Management

Secure sensitive data everywhere from hybrid multicloud to SaaS

AI Security & Governance

Establish controls for safe adoption of AI technologies including GenAI

Security for AI Copilots in SaaS

Unblock the biggest impediments for Safe Adoption of AI Copilots like Microsoft 365 Copilot

Data Access Intelligence & Governance

Monitor user access to data and enforce least privilege controls

Data Discovery & Classification

Discover shadow and cloud-native assets and accurately classify data

Compliance Management

Assess & improve compliance with security best practices frameworks

Breach Impact Analysis

Analyze breach impact & automate notifications to affected individuals

Data Flow Governance

Understand data lineage and secure real-time streaming data

Build safe enterprise AI systems

Safe Enterprise AI Copilots

Implement rule-aware AI copilots across your organization’s data anywhere

Data Vectorization and Ingestion

Extract info from complex Unstructured Files, convert it into AI-ready formats, and sync to vector databases

Data Curation and Sanitization for AI

Transform raw, unstructured files into data ready for model training and tuning

Context-aware LLM Firewalls

Protect AI interactions with intelligent retrieval, response, and prompt firewalls

Unstructured Data Governance

Manage and govern unstructured data to enable its safe use with generative AI

Govern data for safe innovation

Data Discovery & Classification

Discover shadow and cloud-native assets and accurately classify data

Unstructured Data Governance

Manage unstructured data to enable safe use with generative AI

Data Access Governance

Monitor sensitive data access and prevent unauthorized use

AI Governance

Establish controls for safe adoption of AI technologies including GenAI

Data Catalog

Enable users to easily find, understand, trust and access the data they need

Data Lineage

Automatically track changes and transformations of data throughout its lifecycle

Data Quality

Conduct data quality checks and validation across various data types

Automate data privacy operations

Data Mapping Automation

Manage your entire data mapping lifecycle and automate RoPA reports

AI Governance

Comply with emerging AI regulations and ensure safe use of AI

Data Subject Request Automation

Automate entire DSR lifecycle from consumer request intake to secure report delivery

Assessment Automation

Automate your entire assessment lifecycle and demonstrate compliance

Consent Management

Manage your first-party and third-party consent lifecycle from scanning to reporting

Breach Management

Automate your incident management and optimize notifications to users & regulatory bodies

Privacy Center

Elegant Consumer Frontend, Fully Automated Backend, Privacy Regulation Intelligent Everywhere

Compliance Management

Use automation to audit and improve compliance with global regulations and industry standards
Solutions
Technologies

Covering you everywhere with 1000+ integrations across data systems.

GCP

View

AWS

View

Databricks

View

Snowflake

View

Azure

View

+ More

View

Learn more

Regulations & Frameworks

Automate compliance with global privacy regulations.

CDMC

View

EU AI Act

View

OWASP

View

NIST AI RMF

View

European Union GDPR

View

California's CPRA

View

Brazil's LGPD

View

Canada's PIPEDA

View

China's PIPL

View

+ More

View

Learn more

Roles

Identify data risk and enable protection & control.

Data+AI Builders

View

Data Security

View

Data Privacy

View

Data Governance

View

Marketing

View
Resources

Blog

Read through our articles written by industry experts

Collateral

Product brochures, white papers, infographics, analyst reports and more.

Knowledge Center

Learn about the data privacy, security and governance landscape.

Securiti Education

Courses and Certifications for data privacy, security and governance professionals.

Webinars

Learn from industry thought leaders why you need a Data Command Center to enable safe use of data.
Company

About Us

Learn all about Securiti, our mission and history

Partner Program

Join our Partner Program

Contact Us

Contact us to learn more or schedule a demo

News Coverage

Read about Securiti in the news

Press Releases

Find our latest press releases

Careers

Join the talented Securiti team

The Hong Kong Privacy Commissioner's Office published the "Guidance on the Ethical Development and Use of AI" in August 2021, urging organizations handling personal data with AI systems to adopt ethical principles. The emergence of AI systems, such as Large Language Models (LLMs), has prompted several small and medium-sized enterprises to purchase AI solutions from vendors rather than build them from scratch.

In response to recent AI developments, the Hong Kong Privacy Commissioner's Office released the "Artificial Intelligence: Model Personal Data Protection Framework" on June 11, 2024. This framework provides best practice recommendations for organizations handling personal data, particularly those procuring AI solutions from third-party developers or vendors and those customizing or operating AI systems, including generative and predictive AI systems.

This whitepaper provides an overview of the Model Framework and elaborates on the application of ‘Ethical Principles for AI’ and three ‘Data Stewardship Values’ for organizations handling personal data. It also addresses compliance obligations under the Hong Kong Personal Data Protection Ordinance (PDPO) and details recommended measures. Learn how Securiti helps ensure swift compliance with the Model Framework.

The Hong Kong Artificial Intelligence: Model Personal Data Protection Framework is a set of best practice recommendations for organizations handling personal data. It focuses on ethical AI principles, data stewardship values, and compliance with the Hong Kong Personal Data Protection Ordinance (PDPO).

The Hong Kong Personal Data (Privacy) Ordinance (PDPO) is a legal framework that governs the protection of personal data privacy in Hong Kong. It sets out the obligations of data users and the rights of data subjects. Learn more about Hong Kong PDPO.

The Model Framework states that organizations sourcing third-party AI solutions must develop policies and procedures to protect personal data in compliance with the PDPO and comply with Data Stewardship Values and Ethical Principles for AI. Key areas for these policies and procedures include AI strategy and governance, risk assessment and human oversight, customization of AI models and implementation and management of AI systems, and communication and engagement with stakeholders.

The Future of Privacy: Top Emerging Privacy Trends in 2025

Download the whitepaper to gain insights into the top emerging privacy trends in 2025. Analyze trends and embed necessary measures to stay ahead.

Personalization vs. Privacy: Data Privacy Challenges in Retail

Download the whitepaper to learn about the regulatory landscape and enforcement actions in the retail industry, data privacy challenges, practical recommendations, and how Securiti can help.

Navigating Data Privacy: Insights from Airlines, Finance, and Healthcare

Download the whitepaper to learn about the unique data privacy challenges and opportunities within three critical sectors: airlines, finance, and healthcare.

Balancing Innovation and Privacy: Data Privacy Challenges Facing Telecommunication Providers

Download the whitepaper to learn about telecommunication providers' data privacy challenges, practical recommendations, and how Securiti can help.

EU AI Act: 5-Step AI Compliance Automation Playbook

Download the whitepaper to learn about the EU AI Act & its implication on high-risk AI systems, 5-step framework for AI compliance automation and Securiti’s automation toolkit for the EU AI Act.

Say Goodbye to ROT Data: A 6-Step Automation Guide

Eliminate redundant obsolete and trivial (ROT) data with a strategic 6-step automation guide. Download the whitepaper today to discover how to streamline data management and enhance efficiency with automation.

Navigating Sensitive Personal Information (SPI) Under U.S. State Privacy Laws

Download the whitepaper to understand how U.S. state privacy laws define Sensitive Personal Information (SPI) and what governance requirements businesses must follow to ensure compliance.

Navigating Data Regulations in the UAE Financial Services Industry

Download the whitepaper to explore key strategies and insights for navigating data regulations in the UAE's financial services industry. Learn about compliance with evolving privacy laws, data protection standards, and best practices for secure financial operations.

Navigating PI, SPI, and Compliance: Aligning with U.S. State Privacy Law Requirements

Download the whitepaper to learn how to manage Personal Information (PI) and Sensitive Personal Information (SPI) in accordance with U.S. state privacy law requirements.

FTC Cases on Data Privacy (2018–2024): A Comprehensive Analysis

Explore key FTC data privacy cases from 2018–2024. Analyze trends, enforcement actions, and insights on compliance.

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.

Company

Resources

Terms

Get in touch

info@securiti.ai
Securiti, Inc.
3155 Olsen Drive
Suite 350
San Jose, CA 95117

Frost & Sullivan Most Innovative DSPM Leader

Products
Back
Secure Data+AI anywhere

Data Security Posture Management
Secure sensitive data everywhere from hybrid multicloud to SaaS

View

AI Security & Governance
Establish controls for safe adoption of AI technologies including GenAI

View

Security for AI Copilots in SaaS
Unblock the biggest impediments for Safe Adoption of AI Copilots like Microsoft 365 Copilot

View

Data Access Intelligence & Governance
Monitor user access to data and enforce least privilege controls

View

Data Discovery & Classification
Discover shadow and cloud-native assets and accurately classify data

View

Compliance Management
Assess & improve compliance with security best practices frameworks

View

Breach Impact Analysis
Analyze breach impact & automate notifications to affected individuals

View

Data Flow Governance
Understand data lineage and secure real-time streaming data

View
Build safe enterprise AI systems

Safe Enterprise AI Copilots
Implement rule-aware AI copilots across your organization’s data anywhere

View

Data Vectorization and Ingestion
Extract info from complex Unstructured Files, convert it into AI-ready formats, and sync to vector databases

View

Data Curation and Sanitization for AI
Transform raw, unstructured files into data ready for model training and tuning

View

Context-aware LLM Firewalls
Protect AI interactions with intelligent retrieval, response, and prompt firewalls

View

Unstructured Data Governance
Manage and govern unstructured data to enable its safe use with generative AI

View
Govern data for safe innovation

Data Discovery & Classification
Discover shadow and cloud-native assets and accurately classify data

View

Unstructured Data Governance
Manage unstructured data to enable safe use with generative AI

View

Data Access Governance
Monitor sensitive data access and prevent unauthorized use

View

AI Governance
Establish controls for safe adoption of AI technologies including GenAI

View

Data Catalog
Enable users to easily find, understand, trust and access the data they need

View

Data Lineage
Automatically track changes and transformations of data throughout its lifecycle

View

Data Quality
Conduct data quality checks and validation across various data types

View
Automate data privacy operations

Data Mapping Automation
Manage your entire data mapping lifecycle and automate RoPA reports

View

AI Governance
Comply with emerging AI regulations and ensure safe use of AI

View

Data Subject Request Automation
Automate entire DSR lifecycle from consumer request intake to secure report delivery

View

Assessment Automation
Automate your entire assessment lifecycle and demonstrate compliance

View

Consent Management
Manage your first-party and third-party consent lifecycle from scanning to reporting

View

Breach Management
Automate your incident management and optimize notifications to users & regulatory bodies

View

Privacy Center
Elegant Consumer Frontend, Fully Automated Backend, Privacy Regulation Intelligent Everywhere

View

Compliance Management
Use automation to audit and improve compliance with global regulations and industry standards

View
Solutions
Back
GCP
View

AWS
View

Databricks
View

Snowflake
View

Azure
View

+ More
View
CDMC
View

EU AI Act
View

OWASP
Mitigate AI Security Risks with the Broadest Coverage of OWASP Top 10 for LLMs

View

NIST AI RMF
View

European Union GDPR
View

California's CPRA
View

Brazil's LGPD
View

Canada's PIPEDA
View

China's PIPL
View

+ More
View
Data+AI Builders
View

Data Security
View

Data Privacy
View

Data Governance
View

Marketing
View
Resources
- Blog
  
  View
- Collateral
  
  View
- Knowledge Center
  
  View
- Securiti Education
  
  View
- Webinars
  
  View
Company
- About Us
  
  View
- Partner Program
  
  View
- Contact Us
  
  View
- News Coverage
  
  View
- Press Releases
  
  View
- Careers
  
  View

Please enter a minimum of 3 characters to begin your search.

Videos

January 20, 2025

Mitigating OWASP Top 10 for LLM Applications 2025

Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...

January 15, 2025

DSPM vs. CSPM – What’s the Difference?

While the cloud has offered the world immense growth opportunities, it has also introduced unprecedented challenges and risks. Solutions like Cloud Security Posture Management...

January 15, 2025

Top 6 DSPM Use Cases

With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...

January 2, 2025

Colorado Privacy Act (CPA)

What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...

December 24, 2024

Securiti for Copilot in SaaS

Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...

November 1, 2024

Top 10 Considerations for Safely Using Unstructured Data with GenAI

A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....

October 29, 2024

Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes

As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...

August 12, 2024

Navigating CPRA: Key Insights for Businesses

What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...