Securiti launches Gencore AI, a holistic solution to build Safe Enterprise AI with proprietary data - easily

View
Contact Us See a demo

An Overview of Hong Kong Artificial Intelligence: Model Personal Data Protection Framework

In this whitepaper, you will learn:

  • Model Framework, ethical principles for AI, and three data stewardship values
  • Model Framework and compliance with Personal Data Protection Ordinance
  • Recommended measures for organizations procuring AI systems
  • How Securiti can help ensure swift compliance

DOWNLOAD WHITE PAPER

The Hong Kong Privacy Commissioner's Office published the "Guidance on the Ethical Development and Use of AI" in August 2021, urging organizations handling personal data with AI systems to adopt ethical principles. The emergence of AI systems, such as Large Language Models (LLMs), has prompted several small and medium-sized enterprises to purchase AI solutions from vendors rather than build them from scratch.

In response to recent AI developments, the Hong Kong Privacy Commissioner's Office released the "Artificial Intelligence: Model Personal Data Protection Framework" on June 11, 2024. This framework provides best practice recommendations for organizations handling personal data, particularly those procuring AI solutions from third-party developers or vendors and those customizing or operating AI systems, including generative and predictive AI systems.

This whitepaper provides an overview of the Model Framework and elaborates on the application of ‘Ethical Principles for AI’ and three ‘Data Stewardship Values’ for organizations handling personal data. It also addresses compliance obligations under the Hong Kong Personal Data Protection Ordinance (PDPO) and details recommended measures. Learn how Securiti helps ensure swift compliance with the Model Framework.

ACCESS WHITEPAPER
An Overview of Hong Kong Artificial Intelligence

Award-winning technology, built by a proven team, backed by confidence. Learn more.

Frequently Asked Questions

The Hong Kong Artificial Intelligence: Model Personal Data Protection Framework is a set of best practice recommendations for organizations handling personal data. It focuses on ethical AI principles, data stewardship values, and compliance with the Hong Kong Personal Data Protection Ordinance (PDPO).

The Hong Kong Personal Data (Privacy) Ordinance (PDPO) is a legal framework that governs the protection of personal data privacy in Hong Kong. It sets out the obligations of data users and the rights of data subjects. Learn more about Hong Kong PDPO.

The Model Framework states that organizations sourcing third-party AI solutions must develop policies and procedures to protect personal data in compliance with the PDPO and comply with Data Stewardship Values and Ethical Principles for AI. Key areas for these policies and procedures include AI strategy and governance, risk assessment and human oversight, customization of AI models and implementation and management of AI systems, and communication and engagement with stakeholders.

All-in-One Solution For Your Business Needs

The Multi-disciplinary practice to grow trust-equity of your brand and comply with privacy regulations

Navigating Data Regulations in the UAE Financial Services Industry View More

Navigating Data Regulations in the UAE Financial Services Industry

Download the whitepaper to explore key strategies and insights for navigating data regulations in the UAE's financial services industry. Learn about compliance with evolving privacy laws, data protection standards, and best practices for secure financial operations.

FTC Cases on Data Privacy View More

FTC Cases on Data Privacy (2018–2024): A Comprehensive Analysis

Explore key FTC data privacy cases from 2018–2024. Analyze trends, enforcement actions, and insights on compliance.

A Unified Approach to AI Impact and Risk Assessments View More

Navigating the Future: A Unified Approach to AI Impact and Risk Assessments

Securiti's whitepaper provides in-depth expert insights on the essentials of conducting AI risk and impact assessments under various global regulations. Read now to learn more.

The Data Privacy Challenges View More

Personalization But At What Cost? The Data Privacy Challenges In The Airline Industry

Securiti's whitepaper provides a detailed overview of the recent enforcement actions and data privacy challenges within the airline industry and how to address them.

CFPB’s Personal Financial Data Rights Rule View More

Navigating the CFPB’s Personal Financial Data Rights Rule under the Dodd-Frank Act

The whitepaper gives a comprehensive overview of the CFPB’s Personal Financial Data Rights Rule under the Dodd-Frank Act, Section 1033.

2025 OWASP Top 10 LLM Risks View More

CISO’s GenAI Security Blueprint: 2025 OWASP Top 10 LLM Risks

Download the whitepaper to discover CISO's GenAI Security Blueprint for 2025, exploring the OWASP Top 10 LLM risks and strategies to secure LLMs in the evolving AI landscape.

EDPB’s Guidelines View More

What You Should Know about the EDPB’s Guidelines on Calculation of Administrative Fines under the GDPR

Securiti's whitepaper provides a comprehensive guide on the methodology of calculating fines under the GDPR as explained in the EDPB’s guidance on the matter.

Uber's €290 Million Fine for EU Data Transfer Breach: Lessons Learned View More

Uber’s €290 Million Fine for EU Data Transfer Breach: Lessons Learned

Securiti's whitepaper provides a detailed overview of the €290 million fine issued to Uber, lessons other organizations can learn, and how Uber could have avoided this.

View More

Get Ready for Microsoft 365 Copilot: 6 Steps for Secure Adoption

Download our 6-step whitepaper to securely adopt Microsoft 365 Copilot. Learn about SharePoint challenges, risks of uncontrolled rollouts, and how Securiti can automate data security across environments.

Overview of European Health Data Space View More

Comprehensive Overview of European Health Data Space: What You Need to Know

Gain insights into the European Health Data Space (EHDS), key definitions, scope, entities governed by EHDS, relationship with GDPR, obligations, etc. Learn more.

What's
New