Data Privacy
2013 Baker & McKenzie
Data Privacy
Asia Pacific Overview
Example: Hong Kong developments on use of
customer data for marketing
Customer data checklist: key questions to consider
when using customer data for marketing / advertising
10
China: Provisions
regulating Internet
Information Services/
NPC Decision on
strengthening the
protection of internet
information
Hong Kong: Personal
Data (Privacy)
Amendment Ord
(amendments in full
effect on 1/4/2013)
Philippines:
Data Privacy Act
(August 2012)
Cybercrime
Prevention Act
(September 2012)
Vietnam: Provisions
spread across the Civil
Code, the IT Law, the
Penal Code and the
Telecommunications
Law.
Australia:
Amendments come
into effect in March
2014
11
Comprehensive
data protection
law in force
Hong
Kong
Comprehensive
law has passed
but is not yet in
force
1
2
Draft
comprehensive
law has been
proposed
Regulations/
Guidelines
12
China
Hong
Kong
India
Indonesia
Japan
Malaysia
Philippines
Singapore
South
Korea
Taiwan
Thailand
Vietnam
Registration/notification
requirements
(certain
(certain
industries) industries)
(certain
industries)
(certain
industries)
(certain
industries)
(certain
industries)
Criminal sanctions
^
(certain
offences)
(certain
industries)
(public
institutions)
^
(certain cases)
Recent, upcoming, or
proposed reforms
Specific provision on
personal data
2013 Baker & McKenzie
(certain
industries)
13
Penalties
Australia
Civil and criminal penalties range from AU$340,000 for individuals or AU$1.7 million for corporations
China
Infringement of privacy right can give rise to injunctive relief + compensatory damages under Tortious liability law.
Administrative penalties may be imposed for violating NPC Decision
HK
Civil and criminal penalties up to HK1 million for personal data for direct marketing + 5 years imprisonment
Indonesia
India
Japan
Malaysia
Philippines
Singapore
Civil fines up to $1million; Criminal max fine of S100,000 and/or imprisonment of up 12 months for obstruction or making of
false statements to mislead.
Korea
Taiwan
Up to NT200,000
Thailand
Vietnam
Fine up to VNP20,000,000
14
Hong Kong
PROVISION OF
PERSONAL
DATA FOR USE
IN DIRECT
MARKETING
RESPONSE
CHANNEL
CONSENT
(oral or in
writing)
PENALTY FOR
NON
COMPLIANCE
HK$500,000 +
3 years
imprisonment
If provision of
data is for gain:
HK$1 Million +
5 years
imprisonment
(in writing)
(in writing)
(in writing)
If provision of
data is not for
gain:
HK$500,000 +
3 years
imprisonment
15
16