You will find a Data Person Return Scheme under the PDPO. This demands specified organisations to notify the Privateness Commissioner of "prescribed information" including the kinds of private data they Regulate and also the purposes for which the private data are collected, held, processed or made use of. English is http://andrexcfed.arwebo.com/12514359/data-hk-can-be-fun-for-anyone