The Office of the Privacy Commissioner for Personal Data (PCPD) participates in the “Bug Hunting Campaign 2026” (Campaign) as a Strategic Partner. Co-organised by the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force and Cyberbay, a local crowdsourced cybersecurity vulnerability detection platform, the Campaign will adopt a bug bounty-based vulnerability detection model, integrating AI-assisted screening technologies with the expertise of cybersecurity professionals to provide free vulnerability detection services for participating organisations. Security reviews will be conducted on AI-enabled applications, including chatbots, workflow automation, internal knowledge bases and tool-using AI agents. These measures will enable the organisations to identify risks at an early stage, thereby mitigating the risk of data leakage and exposure to cyber attacks.
Participating organisations will receive comprehensive assessment reports together with complimentary one-on-one professional consultation services to facilitate a clear understanding of the findings and the implementation of recommended improvements, including security configuration, internal governance and risk controls for agentic AI deployments. In addition, employees of participating organisations may receive cybersecurity awareness training designed to strengthen their information security awareness and response capability, with particular emphasis on identifying AI-generated content, mitigating deepfake-related risks, and increasing vigilance against social engineering and investment scams.
The Campaign is now open for registration until October 31. Small and medium-sized enterprises and organisations are welcome to participate. For more details, please visit the event website.
