GBA data flow measure extended

The extension of the facilitation measure on the Standard Contract for the Cross-boundary Flow of Personal Information Within the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland, Hong Kong) to all sectors started today.

The Digital Policy Office (DPO) made the announcement and explained that the move, announced in the 2024 Policy Address, is aimed at promoting more cross-boundary services to benefit the public and businesses while facilitating data flow throughout the Greater Bay Area (GBA).

According to the agreement framework of Memorandum of Understanding on Facilitating Cross-boundary Data Flow Within the Guangdong-Hong Kong-Macao Greater Bay Area, the GBA Standard Contract facilitation measure was launched at the end of last year.

The measure allows individuals and organisations of the nine Mainland cities in the bay area and Hong Kong to enter into a standard contract by adopting a standardised template on a voluntary basis, with a view to facilitating and streamlining the cross-boundary flow of personal information within the GBA in a safe and orderly manner.

In addition to being well received, the early and pilot implementation arrangement of the facilitation measure on GBA Standard Contract for the banking, credit referencing and healthcare sectors has been operating smoothly.

The DPO also made it known that starting from today, industries of all sectors in the nine Mainland cities of the bay area and Hong Kong can take part in the facilitation measure and voluntarily adopt the GBA Standard Contract.

Meanwhile, the DPO optimises the filing arrangements and rationalises several operational details to further facilitate the compliance of the cross-boundary flow of personal information by enterprises.

Commissioner for Digital Policy Tony Wong said facilitating the Mainlandâs data flow in the GBA is an important initiative to promote the development of cross-boundary services, digital economy and smart cities.

He pointed out that it not only brings benefits to citizens and enterprises but also accelerates the integration of economic development in the bay area.

Mr Wong added that the GBA Standard Contract is an administrative measure that does not affect the supervisory and regulatory roles of the Office of the Privacy Commissioner for Personal Data in ensuring compliance with the Personal Data (Privacy) Ordinance (PDPO).

The processing and cross-boundary transfer of personal information in Hong Kong will continue to be on a voluntary basis and regulated in accordance with the PDPO of Hong Kong.

Click here for more details about the measure.