In dealing with the many privacy challenges that are universal to privacy regulators around the world, it is important for data protection authorities to work together to find global solutions. This year, the Privacy Commissioner for Personal Data (“the Commissioner”) and his staff had worked actively with major international and regional privacy networks in keeping Hong Kong’s protection of personal data compatible with international privacy standards.

International Conference of Data Protection and Privacy Commissioners
The 30^th International Conference of Data Protection and Privacy Commissioners was held in Strasbourg, France in October 2008. The theme of the Conference was "Protecting privacy in a borderless world". Around 600 privacy commissioners, academics, privacy professionals, advocates, government officials and IT specialists from around the world gathered and discussed the need for binding data protection rules in a globalized world and other privacy issues. Resolutions were made on the urgent need for protecting privacy in a borderless world, especially children’s online privacy, and the establishment of International Privacy/Data Protection Day or Week.

The Commissioner Mr. Roderick Woo (third from right) was the moderator of one of the panel discussions (title: “The digitally assisted man: a digital angel or digital devil?”) of the 30th International Conference of Data Protection and Privacy Commissioners.

APEC Electronic Commerce Steering Group ("ECSG") Data Privacy Sub-group ("DPS")
The Commissioner continued to participate actively in the work of the DPS. His staff attended the 18th ECSG meeting in Lima, Peru in August 2008 to review progress on the implementation of the APEC Data Privacy Pathfinder Projects. In February 2009, the Commissioner attended the First Technical Assistance Seminar on the Implementation of the APEC Data Privacy Pathfinder and the meeting of ECSG in Singapore.

The Commissioner Mr. Roderick Woo (left) and Ms. Brenda Kwok, PCPD Chief Legal Counsel attended the ECSG Data Privacy Sub-group meeting on 24 February 2009 in Singapore.

Asia Pacific Privacy Authorities
Asia Pacific Privacy Authorities (APPA) is the principal forum for privacy authorities in the Asia Pacific Region to liaise and exchange ideas about privacy regulation, new technologies and the management of privacy enquiries and complaints. Members include the Privacy Commissioners of Australia (including the Commissioners of the States of New South Wales, Victoria and the Northern Territory), New Zealand, Canada (including the Province of British Columbia), the Korean Information Security Authority, and Hong Kong.

At its two bi-annual meetings, reports from members’ jurisdictions on privacy developments were received and a wide range of topical privacy issues were discussed.

At the 29^th APPA Forum held from 19 to 20 June 2008 in Seoul, Korea, commissioners shared their views on Korea’s personal information protection policies, personal information grievance resolution, and Internet Personal Identification Number (i-Pin) for protecting private information. The Forum also resolved to continue its efforts to strengthen relationships internationally between APPA members, the OECD and EU member states.

The Commissioner Mr. Roderick Woo (first from left) attended the 29th APPA Forum in Seoul, Korea from 19 to 20 June 2008.

At the 30^th APPA Forum held from 13 to 14 November 2008 in Melbourne, Australia, commissioners reviewed the Resolutions from the 30^th International Data Protection Conference held in Strasbourg in October 2008. The results and analysis of a recent survey on the use of Portable Storage Devices and related risks was provided and updates were given on developments in data breach notification and privacy law reform in several jurisdictions. Besides, commissioners also discussed locational privacy and 'blacklists' in detail.

The Commissioner Mr. Roderick Woo (third from right, first row) attended the 30th APPA Forum in Melbourne, Australia

Overseas Visitors In the year under review, the Office of the Privacy Commissioner for Personal Data (”the PCPD”) received the following distinguished overseas visitors and guests: 3 June 2008 – PCPD staff gave an introduction on the implementation of the Ordinance to some visiting students from the University of Ontario Institute of Technology, Canada.

5 December 2008 – PCPD staff met with the delegation from National Human Rights Commission of Korea and gave them an account of our work of different aspects.

16 December 2008 – the Commissioner met with a delegation from the Shenzhen Administration for Industry and Commerce （深圳市工商行政管理局參察團）and gave them a brief account of our work in relation to the Code of Practice on Consumer Credit Data.