Privacy Commissioner for Personal Data

The Privacy Commissioner for Personal Data (PCPD) is Hong Kong's statutory body responsible for protecting individuals' privacy in relation to their personal data. The organization has recently been thrust into the spotlight due to a significant global data breach affecting the Canvas learning platform. This incident exposed the personal information of over 72,000 individuals in Hong Kong, with seven local educational institutions, including major universities, reporting the breaches to the PCPD. Commissioner Ada Chung Lai-ling has been actively involved, condemning the owner of Canvas for paying a ransom to hackers instead of investing in cybersecurity. The PCPD's current relevance is highlighted by its role in investigating these breaches, warning affected individuals of potential further threats, and scrutinizing the data protection practices of organizations. The Commissioner's stance on the ransom payment underscores the PCPD's commitment to enforcing data protection principles and ensuring accountability for data security failures.