Office of the Privacy Commissioner for Personal Data
Office of the Privacy Commissioner for Personal Data
08/13/2026 | Press release | Distributed by Public on 08/12/2026 20:44
PCPD and HKIRC Sign MoU and Jointly Launch the “Data Privacy and Web Security Scan Programme” to Mitigate Risks of Personal Data Leaks
Date: 13 August 2026
PCPD and HKIRC Sign MoU and
The Privacy Commissioner, Ms Ada CHUNG Lai-ling, SBS (left), and the Chief Executive Officer of the HKIRC, Ir Wilson WONG Ka-wai, MH (right), signed a MoU.
The Privacy Commissioner, Ms Ada CHUNG Lai-ling, SBS (left), and the Chief Executive Officer of the HKIRC, Ir Wilson WONG Ka-wai, MH (right), encouraged schools, NGOs and SMEs to participate in the "Data Privacy and Web Security Scan Programme".
The "Data Privacy and Web Security Scan Programme" is now open to all schools, NGOs and SMEs in Hong Kong, free of charge.
About the Office of the Privacy Commissioner for Personal Data
The Office of the Privacy Commissioner for Personal Data (PCPD) is an independent body set up to oversee the implementation of and compliance with the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (PDPO). The PCPD strives to ensure the protection of the privacy of individuals in relation to personal data through monitoring and supervising compliance with the PDPO, enforcing its provisions and promoting the culture of protecting and respecting personal data. For more information, please visit PCPD.org.hk.
About the Hong Kong International Data Privacy Academy
The Hong Kong International Data Privacy Academy (Academy) was established by the Office of the Privacy Commissioner for Personal Data in June 2026. The Academy aims to actively align with the National 15th Five-Year Plan in supporting Hong Kong's development as an international high-calibre talent hub. The Academy also aims to support the formulation and implementation of Hong Kong's first Five-Year Plan by the Hong Kong Special Administrative Region Government under the leadership of the Chief Executive, thereby actively integrating into and serving the overall national development. The Academy provides flagship training programmes on privacy/personal data protection matters, including introductory seminars, professional workshops, topical seminars on emerging issues, dialogues with experts, in-house seminars and online training.
About the Hong Kong Internet Registration Corporation Limited
Hong Kong Internet Registration Corporation Limited (HKIRC) is a not-for-profit and non-statutory corporation designated by the HKSAR Government to administer the registration of Internet domain names under .hk and .香港 country-code top level domains. The HKIRC provides registration services through its registrars for domain names ending with .com.hk, .org.hk, .gov.hk, .edu.hk, .net.hk, .idv.hk, 公司.香港, .組織.香港, .政府.香港, .教育.香港, .網絡.香港, .個人.香港, .hk and .香港.
Media Enquiry:
PCPD and HKIRC Sign MoU and
Jointly Launch the "Data Privacy and Web Security Scan Programme"
to Mitigate Risks of Personal Data Leaks
The Office of the Privacy Commissioner for Personal Data (PCPD) and the Hong Kong International Data Privacy Academy recently signed a Memorandum of Understanding (MoU) with the Hong Kong Internet Registration Corporation Limited (HKIRC) to establish a framework for collaboration and strengthen cooperation in areas covering the protection of personal data privacy, data security, cybersecurity and artificial intelligence (AI) governance, etc., with a view to further implementing the "AI+" initiative, and to advancing Hong Kong's digital economy and information and technology development.
As the first collaborative initiative following the signing of the MoU, the PCPD and the HKIRC launched the "Data Privacy and Web Security Scan Programme" (Programme) today. The Programme is free of charge and open to all schools, non-profit-making organisations (NGOs) and small-and-medium sized enterprises (SMEs) in Hong Kong. The Programme aims to help participating organisations proactively identify potential website security risks and personal data protection vulnerabilities through website security scanning services and professional consultancy support. It seeks to enhance the awareness of management and staff members to cybersecurity and privacy risks, thereby enabling them to strengthen their cybersecurity posture in an increasingly digitalised and AI-driven environment to safeguard digital assets and personal data privacy. The Programme is also one of the commemorative initiatives marking the 30th Anniversary of the establishment of the PCPD.
Adopting non-intrusive scanning technology, the Programme can effectively identify website security vulnerabilities and potential personal data protection risks without disrupting normal website operations. The assessment can detect system configuration weaknesses and inappropriate security settings, as well as identify other vulnerabilities that may result in unauthorised leakage or inadvertent exposure of sensitive personal data. Upon completion of the assessment, participating organisations will receive a tailored evaluation report, coupled with consultancy support services that offer concrete recommendations for security enhancements and remediation to further strengthen their overall cyber resilience.
The Privacy Commissioner for Personal Data (Privacy Commissioner), Ms Ada CHUNG Lai-ling, SBS, said, "With the rapid advancement of digital technologies and AI, organisations are facing unprecedented challenges in ensuring data security and the protection of personal data privacy. The signing of the MoU between the PCPD, the Hong Kong International Data Privacy Academy and the HKIRC, together with the launch of the 'Data Privacy and Web Security Scan Programme', embody the important principle of following a holistic approach to development and security as set out in the National 15th Five-Year Plan. Through this Programme, we hope to assist more organisations, particularly schools, NGOs and SMEs that have relatively limited resources, in enhancing their cybersecurity and data protection capabilities, and proactively identifying and mitigating risks of personal data breaches, thereby strengthening their cybersecurity resilience and the protection of personal data."
The Chief Executive Officer of the HKIRC, Ir Wilson WONG Ka-wai, MH, said, "As a key stakeholder in Hong Kong's Internet ecosystem, the HKIRC is committed to fostering a secure, robust and sustainable digital development. Enhancing public and organisational awareness of cybersecurity and personal data privacy protection, as well as strengthening their resilience against evolving cyber threats, is a core part of our mission. With the rapid adoption of digital services and AI technologies, organisations are facing increasing cybersecurity, data breach and privacy risks. Cybersecurity and personal data protection have therefore become essential priorities for organisations in today's digital environment.
Through this MoU signed with the PCPD and the Academy, we are establishing a strategic collaboration framework that brings together the professional expertise and strengths of all parties. We hope to help local organisations identify potential website vulnerabilities at an early stage, strengthen their cybersecurity and personal data protection capabilities, and jointly enhance the security and resilience of Hong Kong's digital ecosystem."
Applications for the Programme are now open until 16 November 2026 (Monday). Interested schools, NGOs and SMEs may submit their applications through the designated application channel: https://forms.cloud.microsoft/r/UkitjQw6Tg
For any questions relating to the Programme, please contact: [email protected]
As the first collaborative initiative following the signing of the MoU, the PCPD and the HKIRC launched the "Data Privacy and Web Security Scan Programme" (Programme) today. The Programme is free of charge and open to all schools, non-profit-making organisations (NGOs) and small-and-medium sized enterprises (SMEs) in Hong Kong. The Programme aims to help participating organisations proactively identify potential website security risks and personal data protection vulnerabilities through website security scanning services and professional consultancy support. It seeks to enhance the awareness of management and staff members to cybersecurity and privacy risks, thereby enabling them to strengthen their cybersecurity posture in an increasingly digitalised and AI-driven environment to safeguard digital assets and personal data privacy. The Programme is also one of the commemorative initiatives marking the 30th Anniversary of the establishment of the PCPD.
Adopting non-intrusive scanning technology, the Programme can effectively identify website security vulnerabilities and potential personal data protection risks without disrupting normal website operations. The assessment can detect system configuration weaknesses and inappropriate security settings, as well as identify other vulnerabilities that may result in unauthorised leakage or inadvertent exposure of sensitive personal data. Upon completion of the assessment, participating organisations will receive a tailored evaluation report, coupled with consultancy support services that offer concrete recommendations for security enhancements and remediation to further strengthen their overall cyber resilience.
The Privacy Commissioner for Personal Data (Privacy Commissioner), Ms Ada CHUNG Lai-ling, SBS, said, "With the rapid advancement of digital technologies and AI, organisations are facing unprecedented challenges in ensuring data security and the protection of personal data privacy. The signing of the MoU between the PCPD, the Hong Kong International Data Privacy Academy and the HKIRC, together with the launch of the 'Data Privacy and Web Security Scan Programme', embody the important principle of following a holistic approach to development and security as set out in the National 15th Five-Year Plan. Through this Programme, we hope to assist more organisations, particularly schools, NGOs and SMEs that have relatively limited resources, in enhancing their cybersecurity and data protection capabilities, and proactively identifying and mitigating risks of personal data breaches, thereby strengthening their cybersecurity resilience and the protection of personal data."
The Chief Executive Officer of the HKIRC, Ir Wilson WONG Ka-wai, MH, said, "As a key stakeholder in Hong Kong's Internet ecosystem, the HKIRC is committed to fostering a secure, robust and sustainable digital development. Enhancing public and organisational awareness of cybersecurity and personal data privacy protection, as well as strengthening their resilience against evolving cyber threats, is a core part of our mission. With the rapid adoption of digital services and AI technologies, organisations are facing increasing cybersecurity, data breach and privacy risks. Cybersecurity and personal data protection have therefore become essential priorities for organisations in today's digital environment.
Through this MoU signed with the PCPD and the Academy, we are establishing a strategic collaboration framework that brings together the professional expertise and strengths of all parties. We hope to help local organisations identify potential website vulnerabilities at an early stage, strengthen their cybersecurity and personal data protection capabilities, and jointly enhance the security and resilience of Hong Kong's digital ecosystem."
Applications for the Programme are now open until 16 November 2026 (Monday). Interested schools, NGOs and SMEs may submit their applications through the designated application channel: https://forms.cloud.microsoft/r/UkitjQw6Tg
For any questions relating to the Programme, please contact: [email protected]
The Privacy Commissioner, Ms Ada CHUNG Lai-ling, SBS (left), and the Chief Executive Officer of the HKIRC, Ir Wilson WONG Ka-wai, MH (right), signed a MoU.
The Privacy Commissioner, Ms Ada CHUNG Lai-ling, SBS (left), and the Chief Executive Officer of the HKIRC, Ir Wilson WONG Ka-wai, MH (right), encouraged schools, NGOs and SMEs to participate in the "Data Privacy and Web Security Scan Programme".
The "Data Privacy and Web Security Scan Programme" is now open to all schools, NGOs and SMEs in Hong Kong, free of charge.
|
JOINTLY ISSUED BY OFFICE OF THE PRIVACY COMMISSIONER FOR PERSONAL DATA AND HONG KONG INTERNET REGISTRATION CORPORATION LIMITED |
About the Office of the Privacy Commissioner for Personal Data
The Office of the Privacy Commissioner for Personal Data (PCPD) is an independent body set up to oversee the implementation of and compliance with the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong) (PDPO). The PCPD strives to ensure the protection of the privacy of individuals in relation to personal data through monitoring and supervising compliance with the PDPO, enforcing its provisions and promoting the culture of protecting and respecting personal data. For more information, please visit PCPD.org.hk.
About the Hong Kong International Data Privacy Academy
The Hong Kong International Data Privacy Academy (Academy) was established by the Office of the Privacy Commissioner for Personal Data in June 2026. The Academy aims to actively align with the National 15th Five-Year Plan in supporting Hong Kong's development as an international high-calibre talent hub. The Academy also aims to support the formulation and implementation of Hong Kong's first Five-Year Plan by the Hong Kong Special Administrative Region Government under the leadership of the Chief Executive, thereby actively integrating into and serving the overall national development. The Academy provides flagship training programmes on privacy/personal data protection matters, including introductory seminars, professional workshops, topical seminars on emerging issues, dialogues with experts, in-house seminars and online training.
About the Hong Kong Internet Registration Corporation Limited
Hong Kong Internet Registration Corporation Limited (HKIRC) is a not-for-profit and non-statutory corporation designated by the HKSAR Government to administer the registration of Internet domain names under .hk and .香港 country-code top level domains. The HKIRC provides registration services through its registrars for domain names ending with .com.hk, .org.hk, .gov.hk, .edu.hk, .net.hk, .idv.hk, 公司.香港, .組織.香港, .政府.香港, .教育.香港, .網絡.香港, .個人.香港, .hk and .香港.
－End－
Media Enquiry:
|
Office of the Privacy Commissioner for Personal Data Corporate Communications Division Tel: (852) 9099 7517 Email: [email protected] |
Hong Kong Internet Registration Corporation Limited Marketing and Communications Department Tel: (852) 2319 2303 Email: [email protected] |
Office of the Privacy Commissioner for Personal Data published this content on August 13, 2026, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on August 13, 2026 at 02:44 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at [email protected]