Personal Data Protection Act (PDPO) of Hong Kong SAR, China

Frequently asked questions about the PDPO of Hong Kong SAR, China

Frequently asked questions about the PDPO of Hong Kong SAR, China

Terms & Conditions

活动对象：华为云电销客户及渠道伙伴客户可参与消费满送活动，其他客户参与前请咨询客户经理

活动时间： 2020年8月12日-2020年9月11日

活动期间，华为云用户通过活动页面购买云服务，或使用上云礼包优惠券在华为云官网新购云服务，累计新购实付付费金额达到一定额度，可兑换相应的实物礼品。活动优惠券可在本活动页面中“上云礼包”等方式获取，在华为云官网直接购买（未使用年中云钜惠活动优惠券）或参与其他活动的订单付费金额不计入统计范围内；

Ok
  • What is the PDPO in Hong Kong SAR, China?

    The Personal Data (Privacy) Ordinance (PDPO) was passed in the Hong Kong Special Administrative Region of China in 1995 and came into force in December 1996 (with the exception of certain provisions). It applies to the processing of personal data in, or by persons under the control of Hong Kong SAR, China. The PDPO underwent major amendments in 2012, including new regulations on the use of personal data for direct marketing purposes and incorporating additional safeguards in response to public concerns over new privacy challenges.

  • What data protection principles are stipulated in the PDPO of Hong Kong SAR, China?

    The Hong Kong PDPO has stipulated the following six data protection principles:


    • Principle 1: The purpose and manner of collection of personal data


    • Principle 2: Accuracy and duration of retention of personal data


    • Principle 3: Use of personal data


    • Principle 4: Security of personal data


    • Principle 5: Transparency


    • Principle 6: Access to personal data


    For more details, see Huawei Cloud Compliance with PDPO of the Hong Kong Special Administrative Region of the People's Republic of China.

  • What is the role of Huawei Cloud under the PDPO of Hong Kong SAR, China?

    The personal data processed by Huawei Cloud mainly includes the personal data in your content data and the personal data that you provide when creating or managing your Huawei Cloud account. You have control over your content data. When processing personal data in the content data, Huawei Cloud generally acts as a data processor. Huawei Cloud serves as the data user when processing the personal data in your Huawei Cloud account.

  • How does Huawei Cloud meet the requirements of the PDPO of Hong Kong SAR, China?

    Based on the characteristics of Huawei Cloud services and the PDPO requirements, Huawei Cloud, as a data user, is responsible for protecting the privacy of your personal data in your account information. Huawei Cloud has deeply analyzed the six data protection principles of the PDPO of Hong Kong SAR, China and described its privacy protection responsibilities as a data user under principle together with the corresponding measures. For more details, see Huawei Cloud Compliance with PDPO of the Hong Kong Special Administrative Region of the People's Republic of China.

  • As a customer of Huawei Cloud, what are my responsibilities under the PDPO of Hong Kong SAR, China?

    As a customer of cloud products and services, you have the right to choose how to use these products and services and how to use them to store and process content data, including personal data. Therefore, you are responsible for the security and compliance of the content data. To be brief, you are responsible for content security. Your responsibilities are as follows:


    • Content data protection: You must correctly and completely identify personal data on the cloud, develop policies to protect personal data security and privacy, and take appropriate privacy protection measures. Specific measures include security configuration based on service and privacy protection requirements, such as operating system configuration, network configuration, security protection, and database encryption policies, and proper access control policies and password policies.


    • Response to data subjects' rights: You must protect the rights of data subjects and respond to data subjects' requests. When a personal data breach occurs, you must take appropriate actions in compliance with laws and regulations, such as notifying regulatory authorities, notifying data subjects, and taking mitigation measures.

  • How can Huawei Cloud help me comply with the PDPO of Hong Kong SAR, China?

    When you are a data user and Huawei Cloud assists with the processing of personal data in your content data, you may fall into the jurisdiction of the PDPO of Hong Kong SAR, China. If you are in this jurisdiction, you must comply with the Hong Kong PDPO privacy protection principles. Based on the data protection principles stipulated in this ordinance, Huawei Cloud lists your privacy protection responsibilities as a data user and the service support that Huawei Cloud can provide for you as a data processor.


    In addition, Huawei Cloud provides you with a wide range of cloud products or services that can help you meet the compliance requirements of the PDPO of Hong Kong SAR, China. The products and services include network products, database products, security products, and management and deployment tools. They provide functions such as data protection, data deletion, network isolation, and permission management to help you protect content data privacy.


    For more details, see Huawei Cloud Compliance with PDPO of the Hong Kong Special Administrative Region of the People's Republic of China.