Data Governance in Hong Kong

Having the right people in place is essential to data governance. Your team will need to support, sponsor, steward and operationalize your efforts. A good way to organize your team is using a responsibility assignment matrix such as RACI (responsible, accountable, consulted and informed). Identify the roles and responsibilities for the key people in your data governance program. This will help keep the team focused on what matters most and make your programs more effective.

The Hong Kong Personal Data Protection Ordinance protects personal data by establishing rights for data subjects and specific obligations to data controllers. It regulates the collection, processing, holding and use of personal data through six data protection principles. It also prohibits unauthorized access to and disclosure of personal data. The PDPO was first introduced in 1996 and has been amended twice, most recently in 2021.

A discussion paper published by the Hong Kong government earlier this year explored potential changes to the PDPO. One change mooted was to broaden the current definition of personal data to include data that concerns an ‘identifiable’ person, rather than only a ‘personally identifiable’ one. This seemingly small change would catch more uses of personal data and impose additional compliance measures on companies that process or store this data.

Many businesses house mission-critical data in on-premises data warehouses. Keeping this data on premises delivers continuity, enabling users to continue accessing the data that is critical for their day-to-day business functions. Moreover, it ensures that the organization can continue to use these data sets during a transition to a cloud-based data warehouse. However, the costs associated with maintaining an on-premises data warehouse can be high. Moreover, moving data from on-premises to the cloud can introduce significant latency and security risks. This can be especially problematic if the business has invested in training and development for its data warehouse. In such cases, it may be necessary to consider migrating enterprise data into a managed service that can deliver continuity and reduce costs.