

Abuse of AI Deepfakes: Toolkit for Schools and Parents (2025)![]() |
“Abuse of AI Deepfakes: Toolkit for Schools and Parents” provides practical advice to schools and parents to assist them in handling deepfake incidents involving children and young people, as well as safeguarding their privacy in relation to personal data. |
|
Checklist on Guidelines for the Use of Generative AI by Employees (2025) |
The “Checklist on Guidelines for the Use of Generative AI by Employees” aims to assist organisations in developing internal policies or guidelines on the use of Gen AI by employees at work while complying with the requirements of the Personal Data (Privacy) Ordinance (PDPO). |
|
Artificial Intelligence: Model Personal Data Protection Framework (2024) |
The “Artificial Intelligence: Model Personal Data Protection Framework” (Model Framework) provides internationally well-recognised and practical recommendations and best practices to assist organisations to procure, implement and use AI, including generative AI, in compliance with the relevant requirements of the PDPO, so that organisations can harness the benefits of AI while safeguarding personal data privacy. |
|
Guidance on the Ethical Development and Use of Artificial Intelligence (2021) |
The “Guidance on the Ethical Development and Use of Artificial Intelligence” (AI Guidance) aims to help organisations understand and comply with the relevant requirements of the PDPO when they develop or use AI. |
|
Leaflet on “Artificial Intelligence: Model Personal Data Protection Framework” (2024) |
The leaflet assists organisations in understanding and referencing the Model Framework, by setting out some key recommendations. |
|
The leaflet provides 10 tips on the safe use of AI chatbots to help users protect their personal data privacy. |
|
|
Leaflet on “Guidance on the Ethical Development and Use of Artificial intelligence” (2021) |
The leaflet assists organisations in understanding the AI Guidance, by setting out some key recommendations. |
Regulations and Major Policies/Guidelines on AI in the Mainland
Major regulations on AI in Other Jurisdictions
Other International Developments
Objectives
In active alignment with the guiding principle of ensuring both development and security under the National 15th Five-Year Plan, and to support the policy to develop AI+ in Hong Kong as set out in the Chief Executive’s 2025 Policy Address, the PCPD and the Digital Policy Office (DPO) jointly launch the Safeguarding Personal Data AI Sandbox (Sandbox), with Hong Kong Cyberport (Cyberport), the Hong Kong Productivity Council (HKPC), the Association of I.T. Leaders in Education and the Hong Kong Association for Computer Education acting as supporting organisations. The Sandbox aims to assist schools in adopting AI solutions (Participants) in their operations in a safe and responsible manner, in compliance with the relevant requirements of the PDPO while adopting appropriate and adequate security measures. The programme provides a collaborative platform for Participants, AI solution suppliers, the PCPD, the DPO, the Cyberport and the HKPC, with a view to fostering innovation while facilitating compliance with the PDPO and promoting the responsible adoption of AI technologies. The Sandbox will focus on the use of AI technologies in the education sector and support schools in exploring and adopting AI solutions.
Eligibility criteria
The Sandbox is launched as a pilot project. The first phase of the Sandbox will be 6 months. The Sandbox is open for application from publicly-funded primary and secondary schools registered under the Education Ordinance (Cap. 279 of the Laws of Hong Kong).
Evaluation criteria
A total of 15 applicants will be selected by the PCPD and the DPO in consultation with the Selection Committee comprising officers of the PCPD and the DPO, external experts and members from the IT sector. Eligible applicants may be shortlisted based on the following non-exhaustive factors:In addition to the factors listed above, the PCPD and the DPO may select the applicants with a view to achieving a diverse spectrum of AI use cases.
15 applicants will be selected to benefit from complimentary access to the PCPD’s regulatory guidance on personal data privacy protection, DPO’s guidance on the Hong Kong Generative Artificial Intelligence Technical and Application Guideline, as well as technical advice from the Cyberport and the HKPC in implementing AI solutions.
Application process
The Sandbox is open for applications until 30 October 2026. Applicants must complete the online application form at https://eform.cefs.gov.hk/form/dpo034/en/.
A briefing session will be held on 28 August 2026 to provide an overview of the Sandbox, including its objectives, scope, application requirements and evaluation criteria, for interested schools. Details of the briefing session will be announced in due course.
Please click here for the Framework of the Safeguarding Personal Data AI Sandbox.
Please click here for the media statement on “Privacy Commissioner’s Office and Digital Policy Office Collaborate to Launch the Safeguarding Personal Data AI Sandbox”.
Please click here for the media statement on the Awards Presentation Ceremony.
Please click here for the awardee list.