Data Security Scanner

In the era of big data, business and organisations deploy various technologies to collect data in order to formulate tailor-made business strategies and/or policies. Data security has become increasingly crucial for business and organisations, particularly in terms of safeguarding the security of personal data.

In August 2022, the Office of the Privacy Commissioner for Personal Data (the "PCPD") published the Guidance Note on Data Security Measures for Information and Communications Technology (“Guidance”), which provides companies and organisations with recommended data security measures for information and communications technology ("ICT") to facilitate their compliance with the relevant requirements under the Personal Data (Privacy) Ordinance (Cap. 486) (the “PDPO”).

Launched by the PCPD in November 2023, the Data Security Scanner enables companies and organisations (being data users) to conduct a quick and easy self-assessment on the sufficiency of its data security measures for their ICT systems.

The Data Security Scanner consists of 12 questions and may take around 15 minutes to complete.

Upon submitting your answers, a report will be generated. The report will provide an overview of your organisation’s data security risk levels and offer specific recommendations tailored to your organisation for reference and action. You may also download the report.

Let’s get started!