{"id":17342,"date":"2021-10-11T11:02:00","date_gmt":"2021-10-11T11:02:00","guid":{"rendered":"https:\/\/al-legal.co\/?p=17342"},"modified":"2021-10-20T07:55:59","modified_gmt":"2021-10-20T07:55:59","slug":"personal-data-privacy-amendment-ordinance2021-criminalisation-of-doxxing","status":"publish","type":"post","link":"https:\/\/al-legal.co\/personal-data-privacy-amendment-ordinance2021-criminalisation-of-doxxing\/","title":{"rendered":"Personal Data (Privacy) (Amendment) Ordinance 2021 \u2013 Criminalisation of doxxing"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"17342\" class=\"elementor elementor-17342\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-850dfc9 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"850dfc9\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c362534\" data-id=\"c362534\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-03bcc48 elementor-widget elementor-widget-text-editor\" data-id=\"03bcc48\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 25-04-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><em>(3 min. read)<\/em><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9108405 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9108405\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0d03df7\" data-id=\"0d03df7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-11a58c7 elementor-widget elementor-widget-pix-feature\" data-id=\"11a58c7\" data-element_type=\"widget\" data-widget_type=\"pix-feature.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div id=\"duo-icon-95734448\" class=\"pix-feature-el text-custom \"><h4 class=\"font-weight-bold   text-heading-default \" style=\"padding-top:20px;\"  >Introduction<\/h4><div class=\"text-body-default    font-weight-bold  \" style=\"padding-top:20px;\"  ><\/div><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b570928 elementor-widget elementor-widget-text-editor\" data-id=\"b570928\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The Personal Data (Privacy) (Amendment) Ordinance 2021 (the \u201c<strong>Ordinance<\/strong>\u201d) was published in the Gazette and came into effect on 8 October 2021.<\/p><p>A Government spokesman said, &#8220;<em>Since 2019, doxxers have attacked those of different political stances through the indiscriminate disclosure of their personal data, in effect weaponising the personal data concerned. The Ordinance aims to combat malicious doxxing acts that have become more rampant in recent years, so as to protect the personal data privacy of the general public<\/em>\u201d (<a href=\"https:\/\/www.info.gov.hk\/gia\/general\/202110\/08\/P2021100800392.htm\">Press Release<\/a>, 2021).<\/p><p>Doxxing is (a) making someone&#8217;s personal information available without consent and (b) for malicious purposes (including harassment) or so that the person can be more easily targeted by others.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2051851 elementor-widget elementor-widget-pix-feature\" data-id=\"2051851\" data-element_type=\"widget\" data-widget_type=\"pix-feature.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div id=\"duo-icon-71330477\" class=\"pix-feature-el text-custom \"><h4 class=\"font-weight-bold   text-heading-default \" style=\"padding-top:20px;\"  >Update by the Ordinance<\/h4><div class=\"text-body-default    font-weight-bold  \" style=\"padding-top:20px;\"  ><\/div><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-28a68e9 elementor-widget elementor-widget-text-editor\" data-id=\"28a68e9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To summarise, the Ordinance aims to combat unlawful doxxing acts in three aspects:<\/p><p>(1) criminalise doxxing acts as new offences targeting malicious acts of disclosing personal data of the data subject without his\/her consent, with an intent or being reckless as to whether specified harm would be caused to the data subject or his\/her family member;<\/p><p>(2) empower the Privacy Commissioner for Personal Data (\u201c<strong>PCPD<\/strong>\u201d) to carry out criminal investigations and institute prosecution towards doxxing-related offences; and<\/p><p>(3) confer on the Commissioner statutory powers to serve notices to those who are able to take a cessation action, directing them to cease disclosure of doxxing contents (cessation notices).<\/p><p>The amendments focus on combating doxxing acts and seek to strike a reasonable balance between protection of privacy and freedom of speech.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b689dab elementor-widget elementor-widget-pix-feature\" data-id=\"b689dab\" data-element_type=\"widget\" data-widget_type=\"pix-feature.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div id=\"duo-icon-50348375\" class=\"pix-feature-el text-custom \"><h4 class=\"font-weight-bold   text-heading-default \" style=\"padding-top:20px;\"  ><i> New doxxing offences <\/i><\/h4><div class=\"text-body-default    font-weight-bold  \" style=\"padding-top:20px;\"  ><\/div><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-adc702f elementor-widget elementor-widget-text-editor\" data-id=\"adc702f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The Ordinance introduced two-tier doxxing offences under the new section 64 of the Ordinance.<\/p><p><strong>(1) Summary offence (section 64(3A))<\/strong>: It is a summary offence if a person (a) discloses personal data without the data subject&#8217;s consent and (b) has an intent or is reckless as to whether any specified harm would be caused to the data subject or the data subject&#8217;s family member.<\/p><p>The summary offence is subject to a maximum fine of <strong>HKD100,000<\/strong> and imprisonment for <strong>two years<\/strong>.<\/p><p><strong>(2) Indictable offence (section 64(3C))<\/strong>: It is an indictable offence requiring the same personal data disclosure as in section 64(3A), with the additional requirement that <strong>specified harm<\/strong> is caused to the data subject or the data subject\u2019s family member.<\/p><p>The indictable offence is subject to a maximum fine of <strong>HKD1 million<\/strong> and imprisonment for <strong>five years<\/strong>.<\/p><p>\u201c<strong>Family member<\/strong>\u201d is defined widely in the Ordinance to include a relation by blood, marriage or adoption.<\/p><p>The definition of \u201c<strong>specified harm<\/strong>\u201d is wider than the existing section 64(2) offence requiring psychological harm, and includes one of these four limbs:<\/p><p>(a) harm to the person in the form of harassment, threats or intimidation;<\/p><p>(b) bodily or psychological harm;<\/p><p>(c) harm causing the person to reasonably be concerned for the person&#8217;s safety or well-being; <br \/><br \/>or<\/p><p>(d) damage to the person&#8217;s property.<\/p><p>Any person charged with a doxing offence may establish a <strong>defence<\/strong> pursuant to section 64(4) of the Ordinance, where disclosure was:<\/p><p>(a) reasonably believed to be necessary for preventing or detecting crime;<\/p><p>(b) required or authorised by law or court order;<\/p><p>(c) reasonably believed to be consented to by the data user or data subject; or<\/p><p>(d) solely for news activity (or a directly related activity) and such publication or broadcast was reasonably believed to be in the public interest.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6745f43 elementor-widget elementor-widget-pix-feature\" data-id=\"6745f43\" data-element_type=\"widget\" data-widget_type=\"pix-feature.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div id=\"duo-icon-78266299\" class=\"pix-feature-el text-custom \"><h4 class=\"font-weight-bold   text-heading-default \" style=\"padding-top:20px;\"  >Implementation Guideline<\/h4><div class=\"text-body-default    font-weight-bold  \" style=\"padding-top:20px;\"  ><\/div><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-928c469 elementor-widget elementor-widget-text-editor\" data-id=\"928c469\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The Office of the Privacy Commissioner for Personal Data has issued the Implementation Guideline detailing the new doxxing offences and powers to conduct criminal investigation, prosecution and issue cessation notice (the \u201c<strong>Guideline<\/strong>\u201d) \u2013 click <a href=\"https:\/\/www.gld.gov.hk\/egazette\/pdf\/20212540\/egn202125406235.pdf\">here<\/a> for relevant link.\u00a0<\/p><p>The Guideline provides, among other things, examples of the \u201cspecified harm\u201d that must be intended to be caused and the factors to be taken into account.<\/p><p>Materials that are the subject of claims of <strong>legal professional privilege<\/strong> are protected against the execution of a warrant and must be sealed and not examined (para 3.3.6 of the Guideline).\u00a0<\/p><p>The Guideline also provides (a) sample warrants to search premises and access electronic devices and (b) sample forms for written notices requesting materials and the answering of questions in connection with an investigation.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e16bf8 elementor-widget elementor-widget-pix-feature\" data-id=\"2e16bf8\" data-element_type=\"widget\" data-widget_type=\"pix-feature.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<div id=\"duo-icon-158341297\" class=\"pix-feature-el text-custom \"><h4 class=\"font-weight-bold   text-heading-default \" style=\"padding-top:20px;\"  >Key takeaways<\/h4><div class=\"text-body-default    font-weight-bold  \" style=\"padding-top:20px;\"  ><\/div><\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f57a402 elementor-widget elementor-widget-text-editor\" data-id=\"f57a402\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The introduction of the two new doxxing offences may affect a range of online users, e.g. online platforms and websites; social media platforms; and internet service providers incorporated in Hong Kong or have a place of business (or individual staff) in Hong Kong.\u00a0 The following actions are recommended:<\/p><ul><li>read the Ordinance and Guideline and familiarise with legislative changes in relation to doxing offences;<br \/><br \/><\/li><li>if in doubt, remove or block access to any potentially doxxing content to avoid any inadvertent contravention of the Ordinance;<br \/><br \/><\/li><li>review the terms and conditions of any relevant website, online platform or forum, in particular terms concerning the disclosure of personal data of users to give effect to the new legislative changes, including the Privacy Commissioner for Personal Data\u2019s criminal investigations power; and<br \/><br \/><\/li><li>update internal policies and guidelines to anticipate and mitigate against any risks of these issues arising in respect of an organisation.<\/li><\/ul><p>Contact us if you wish to discuss this topic in further detail.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a061a9a elementor-widget elementor-widget-text-editor\" data-id=\"a061a9a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><em>This article is provided for informational purposes only. It is not intended to be, nor should it be substituted for, legal advice, which turns on specific facts.\u00a0 <\/em><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>(3 min. read) Introduction The Personal Data (Privacy) (Amendment) Ordinance 2021 (the \u201cOrdinance\u201d) was published in the Gazette and came into effect on 8 October 2021. A Government spokesman said, &#8220;Since 2019, doxxers have attacked those of different political stances&#8230;<\/p>\n","protected":false},"author":3,"featured_media":17348,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"wds_primary_category":0,"footnotes":""},"categories":[1],"tags":[29,25,28,30,27,26],"_links":{"self":[{"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/posts\/17342"}],"collection":[{"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/comments?post=17342"}],"version-history":[{"count":0,"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/posts\/17342\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/media\/17348"}],"wp:attachment":[{"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/media?parent=17342"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/categories?post=17342"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/al-legal.co\/wp-json\/wp\/v2\/tags?post=17342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}