Data Protection Policy

You are viewing content for Hong Kong.

What is it?

A Data Protection Policy is a data protection and data security policy for your employees.

A Data Protection Policy makes sure everyone in your company understands why data protection is important. It also describes procedures for collecting, working with, and storing data.

Why do you need it?

A Data Protection Policy is an important document to inform staff about your use of their personal data, as required by law. It is also used to educate your employees about the principles that they must adhere to in handling the personal data of customers that they may collect during the course of their employment. Such a policy will ensure that you fulfil your legal obligation to protect the security of personal data.

Key clauses to watch for:

When drafting a Data Protection Policy, it is important to focus on a number of key clauses, in particular:

  • Details of your company;
  • Overall responsibility for the company's data protection compliance;
  • Name of the appointed officer for data processing and data security;
  • Name of the employee signing this policy; and
  • How data should be collected and used.

Data Protection Policy Document

Ready to get started?