🇭🇰 Hong Kong PDPO Compliance Checker
香港個人資料（私隱）條例合規檢測
Instantly scan your website for compliance with Hong Kong's Personal Data (Privacy) Ordinance. Check the 6 Data Protection Principles, cross-border transfer requirements, and direct marketing consent.
🔍 Enter Website URL to Scan
輸入網站網址進行掃描
This tool performs a simulated compliance check based on common PDPO requirements. For official compliance assessment, consult with the PCPD or a qualified legal professional. 此工具執行模擬合規檢查，如需正式評估，請諮詢個人資料私隱專員公署或合資格法律專業人士。
Scanned:
📋 Detailed Results 詳細結果
💡 Recommendations 改善建議
🇭🇰 The 6 Data Protection Principles
六項保障資料原則
DPP 1 - Purpose & Collection
原則一 - 收集目的及方式
Personal data must be collected for a lawful purpose directly related to a function of the data user. Collection must be necessary and by lawful and fair means.
DPP 2 - Accuracy & Retention
原則二 - 準確性及保留期限
Personal data must be accurate and kept no longer than necessary for the fulfillment of the purpose for which it is used.
DPP 3 - Use Limitation
原則三 - 使用限制
Personal data must not be used for any purpose other than the purpose for which it was collected, unless with consent or exemption.
DPP 4 - Data Security
原則四 - 資料保安
Appropriate security measures must be taken to protect personal data against unauthorized or accidental access, processing, or loss.
DPP 5 - Openness
原則五 - 公開性
Data users must make publicly available their policies and practices relating to personal data, including types of data held and main purposes.
DPP 6 - Access & Correction
原則六 - 查閱及更正
Individuals have the right to access their personal data and request correction of inaccurate data within 40 days.
Cross-Border Transfer
跨境轉移
Transfer of personal data outside Hong Kong is restricted unless the destination has comparable data protection laws or consent is obtained.
Direct Marketing
直接促銷
Using personal data for direct marketing requires explicit consent. Data subjects must be given opt-out option and right to request cessation.