What's New
What's new - Promoting Privacy Protection in AI – Assistant Privacy Commissioner Interviewed by Media on the Privacy Risks of AI
Date: 29 June 2026
Promoting Privacy Protection in AI – Assistant Privacy Commissioner Interviewed by Media on the Privacy Risks of AI
The Assistant Privacy Commissioner for Personal Data (Legal) (Assistant Privacy Commissioner), Ms. Fiona LAI Ho-yan, was recently interviewed by RTHK’s “Hong Kong Connection” to explain the privacy risks posed by artificial intelligence (AI).
In the interview, the Assistant Privacy Commissioner pointed out that while many people consider it harmless to upload photos on social media, the digital footprint accumulated over time in fact poses privacy risks. Such data may reveal not only individuals’ facial images and voices, but also their lifestyle habits, interpersonal networks and behavioural patterns, which could be readily exploited by criminals. She emphasised that the Personal Data (Privacy) Ordinance (PDPO), as a technology-neutral and principle-based legislation, is applicable to the use of AI to collect, process and use personal data. If the use of generative AI to create content involves personal data, and such use goes beyond the original purpose(s) for which the data was collected, it may constitute a breach of the relevant data protection principle. The creation and/or disclosure of malicious deepfake content may also constitute doxxing under the PDPO, and may even constitute other criminal offences.
The interview by the RTHK’s “Hong Kong Connection”, which was broadcast on 25 June, can be viewed here (Chinese only).
In the interview, the Assistant Privacy Commissioner pointed out that while many people consider it harmless to upload photos on social media, the digital footprint accumulated over time in fact poses privacy risks. Such data may reveal not only individuals’ facial images and voices, but also their lifestyle habits, interpersonal networks and behavioural patterns, which could be readily exploited by criminals. She emphasised that the Personal Data (Privacy) Ordinance (PDPO), as a technology-neutral and principle-based legislation, is applicable to the use of AI to collect, process and use personal data. If the use of generative AI to create content involves personal data, and such use goes beyond the original purpose(s) for which the data was collected, it may constitute a breach of the relevant data protection principle. The creation and/or disclosure of malicious deepfake content may also constitute doxxing under the PDPO, and may even constitute other criminal offences.
The interview by the RTHK’s “Hong Kong Connection”, which was broadcast on 25 June, can be viewed here (Chinese only).
The Assistant Privacy Commissioner, Ms Fiona LAI Ho-yan, was interviewed by RTHK’s “Hong Kong Connection”.