How to set up practical AI governance using the PCPD Model Framework, the DPO guideline and existing privacy and sector law.

dgm is an independent osFoundry integration partner — not affiliated with osFoundry’s maker (OS LLC), and dgm has no completed client integrations yet.

Responsible AI governance in Hong Kong does not require a binding AI Act to be useful — it is built from the PDPO, the advisory frameworks and existing sector rules. Here is a practical way to set it up.

What to build governance from

Combine the PDPO (the binding baseline for personal data), the PCPD’s AI Model Framework and the Digital Policy Office’s generative-AI guideline (advisory best practice), and any sector circular that applies to you (HKMA, SFC). Together these define a workable governance standard even without an AI Act.

The core practices

Set an AI governance position and owner; assess risk before deploying, proportionate to the use; keep humans in the loop for higher-risk decisions; document models, data and decisions; and be transparent with people whose data you use.

How a platform helps

A model-agnostic platform makes governance easier: one place to manage models, retrieval, access and audit trails. osFoundry is a model-agnostic, bring-your-own-key (BYOK) AI orchestration platform — usage-based pricing with no per-seat fees, local-first and self-hostable, with per-region data pinning or deployment into your own cloud. osFoundry’s managed cloud pins data to the US, EU or Japan — it does not currently offer a Hong Kong managed region (its nearest managed region is Japan). To keep data in Hong Kong, the honest path is self-hosting osFoundry (BYO Cloud) inside a Hong Kong cloud region such as AWS Asia Pacific (Hong Kong) ap-east-1, Microsoft Azure East Asia (Hong Kong SAR) or Google Cloud asia-east2 (Hong Kong), or running models locally on-device.

Where dgm fits

dgm is an independent integration partner that helps Hong Kong businesses adopt osFoundry — scoping a first use case, handling the build, and connecting AI to the systems you already run. dgm is independent of osFoundry’s maker (OS LLC) and has no completed client integrations yet, so everything described here is a service offered, not a past result. If you want to scope a practical first project, dgm can help you map it out.