How Hong Kong’s 2021 anti-doxxing amendment to the PDPO applies when AI systems scrape and surface individuals’ personal data.

dgm is an independent osFoundry integration partner — not affiliated with osFoundry’s maker (OS LLC), and dgm has no completed client integrations yet.

Hong Kong’s 2021 anti-doxxing amendment to the PDPO created criminal offences and gave the Privacy Commissioner real enforcement powers. AI systems that scrape and surface personal data can fall within scope.

What the 2021 amendment did

The Personal Data (Privacy) (Amendment) Ordinance 2021, in force from 8 October 2021, created two-tier doxxing offences (up to a HK$1,000,000 fine and 5 years’ imprisonment for the more serious tier), gave the Commissioner criminal investigation and prosecution powers, and the power to issue cessation notices compelling the removal of doxxing content.

Why it matters for AI

An AI system that scrapes, aggregates and surfaces individuals’ personal data — for example a tool that compiles profiles from public sources — can attract these offences and the Commissioner’s enforcement powers. The risk is real for AI products that publish or expose personal data.

How to stay clear

Do not build AI that discloses personal data without a proper basis; respect the PDPO’s collection and use principles; and assess doxxing risk before deploying any AI that surfaces information about people. osFoundry’s managed cloud pins data to the US, EU or Japan — it does not currently offer a Hong Kong managed region (its nearest managed region is Japan). To keep data in Hong Kong, the honest path is self-hosting osFoundry (BYO Cloud) inside a Hong Kong cloud region such as AWS Asia Pacific (Hong Kong) ap-east-1, Microsoft Azure East Asia (Hong Kong SAR) or Google Cloud asia-east2 (Hong Kong), or running models locally on-device.

Where dgm fits

dgm is an independent integration partner that helps Hong Kong businesses adopt osFoundry — scoping a first use case, handling the build, and connecting AI to the systems you already run. dgm is independent of osFoundry’s maker (OS LLC) and has no completed client integrations yet, so everything described here is a service offered, not a past result. If you want to scope a practical first project, dgm can help you map it out.