InvestHK Ransomware Incident Reminds Businesses to Take the Appropriate Security Measures

InvestHK, the Hong Kong Special Administrative Region government department responsible for promoting foreign direct investment, has confirmed that no personal data was compromised during a ransomware attack on Feb 22. Moreover, the department has also been able to resume normal operations since then and no further suspicious activities have been identified.

However, the incident should serve as a reminder that it is essential for businesses to take the appropriate security measures to prevent personal data from being compromised. This is particularly important in an environment where cyber attacks are increasingly commonplace and companies are relying on data to run their business.

Aside from the fact that a data breach could be costly, it could also lead to severe regulatory action. Regulatory authorities such as the Privacy Commissioner for Personal Data (PCPD) and the Information Commission of Hong Kong may fine companies who are found to be in violation of their data protection obligations. In addition, the PCPD has the power to order remedial action or compensation from data users who have failed to comply with the six core DPPs of the PDPO.

If a company is transferring personal data to an overseas recipient, it is important that it considers its obligations under the PDPO before making such a transfer. Firstly, it is necessary to determine whether the data being transferred meets the definition of ‘personal data’ under the PDPO. For this purpose, the PDPO defines ‘personal data’ as data that concerns an identifiable person.

This includes information such as the name, address, telephone number, email address and other data that can be used to identify a person. However, it does not include data that is only capable of being used to describe a particular group of people such as a gender, ethnicity or profession.

In this respect, it is worth noting that the PCPD’s recommended model clauses for data transfers contain provisions that require a data user to ensure that the data processor will not use or permit any sub-processor to use personal data transferred to it in a location outside of Hong Kong other than in places that have been expressly agreed with the data user. The same model clauses also require the data processor to undertake that any processing of the transferred personal data that is necessary for the purposes of the contract will be carried out in accordance with the terms of the data transfer agreement and the PDPO’s DPPs.

The next step is to consider whether the personal data that is being transferred relates to an identifiable person. If it does not, then it is unlikely that the PDPO’s obligations in respect of data transfer will apply.

Lastly, it is important to consider the intention of the person acquiring the data. If he is merely collecting the data for marketing purposes, then it is unlikely that his obligation to provide a PICS will arise and issues in respect of data transfer may not even come up for consideration.

The HK Prize and the 41st Hong Kong Film Awards

hk prize

The HK Global Development Prize invites innovative ideas on how Hong Kong can enhance its international development efforts and shape its role on the world stage. The winner will receive a grant of up to HK$5 million. The Prize is endorsed by the Hong Kong International Development Association (HKIDA).

The award ceremony will take place in June, and the winning project will be selected by an international panel of experts. The panel will assess the projects based on their impact, sustainability and feasibility. The panel will also consider how the project can be implemented and whether it will make a difference to people’s lives.

Mabel Cheung’s controversial documentary To My Nineteen-Year-Old Self won best film at the 41st Hong Kong Film Awards (HKFA) on Sunday night. The coming-of-age film was a crowd-pleaser, earning a rousing standing ovation at the ceremony hosted by HK Television and held at the Hong Kong Cultural Centre. It was a star-studded event, with many of the nominees and guests making appearances on the red carpet.

During the opening ceremony, a special video tribute to Sir David Attenborough was shown in the backdrop of a spectacular fireworks display. This was followed by a speech from the Chairman of the Selection Committee, which highlighted the achievements of this year’s finalists and the importance of the HKFA in celebrating local talent.

There will be a HK$1 million bonus for PPs who win their first time in Class 3 while a HK$1 million top-up for PPGs who win their first race in Class 2 or above when rated 80 or higher will continue to be in effect. Meanwhile, the bonus for Southern Hemisphere imports will be extended to their four-year-old season, while Northern Hemisphere horses will remain eligible for PP and PPG bonuses until the end of their five-year-old season.

Prize money for the 2023/24 racing season will increase by 8 per cent, with increases across all classes of racing. The total pool will be HK$1.38 billion, including the Longines Hong Kong International Races and FWD Champions Day. Details of the bonus structure will be announced shortly.

The Society for Hong Kong Studies (SHKS) will organise and sponsor the newest addition to the ICAS Book Prize family, the IBP 2023 Best Article on Global Hong Kong Studies. This prize is open to all scholars and students with an interest in Hong Kong, whether in their area of expertise or not. The SHKS is a scholarly, non-partisan and independent professional association. It was founded in 2018 and is an affiliate of ICAS. Its members are located worldwide from all disciplines. The SHKS seeks to encourage new theories, concepts and methodologies for researching Hong Kong’s multifaceted connections to and significance in the world, both contemporary and historical. It aims to bring together Hong Kong Studies scholars from America, Europe and Asia. For more information, please visit the SHKS website.