On January 3, 2025, the "Cross Border Data Transfer" panel discussion, hosted by the Hong Kong China Network Security Association (HKCNSA) and co-organized by NetApp, was successfully held. The discussion focused on key issues of data protection and cross-border data transfer, with several experts in the field of data privacy protection invited for in-depth exchanges.
The discussion was led by Ms. Chandy Ye, Vice Chairlady of the HKCNSA and Director of its Data Privacy Committee. Panelists included Mr. Adam Au and Mr. Vincent Ng, both members of the Data Privacy Committee, who delved into topics such as cross-border data transfer and compliance arrangements within the Greater Bay Area.
Ms. Ye initiated the discussion by outlining the restrictions on cross-border data flow under China's Personal Information Protection Law (PIPL), Hong Kong's Personal Data (Privacy) Ordinance (PDPO), and Macau's Personal Data Protection Act (PDPA). She emphasized the importance of cross-border data transfer and shared experiences in addressing these restrictions. She pointed out that with the rapid development of the digital economy in the Greater Bay Area, cross-border data transfer has become a significant issue for enterprises, highlighting the importance of promoting free data flow while ensuring compliance.
Following this, the panelists delved into the cross-border data transfer (CBDT) mechanism under China's PIPL through practical cases. They shared experiences in handling CBDT restrictions and analyzed the impact of CBDT on business and best practices. Additionally, the panelists discussed the Greater Bay Area Secure Computing Center (GBA SCC) as a viable solution to CBDT issues, providing an objective analysis of its application scenarios and advantages and disadvantages.
During the discussion, panelists offered suggestions to enhance CBDT within the Greater Bay Area, highlighting the necessity of establishing unified data standards and collaborative mechanisms. By creating standard contract templates and simplifying processes such as Personal Information Protection Impact Assessments (PIA), compliance costs for enterprises can be effectively reduced while ensuring the legality and security of data flow.
The forum received widespread attention and active participation from experts, scholars, and corporate executives from various industries. Through seminars and Q&A sessions, attendees engaged in in-depth exchanges on various aspects of cross-border data flow and reached a consensus on the future direction of data security and privacy protection practices.
Looking ahead, the Hong Kong China Network Security Association (HKCNSA) plans to host more such seminars, aiming to strengthen industry exchanges and cooperation, foster the development of data security and privacy protection, and make greater contributions to the digital economy in the Greater Bay Area.
