Privacy Commissioner's Office follows up on data misuse cases and publishes agentic AI guidance

Original title: Privacy Commissioner’s Office (1) Follows up on Three Cases Involving Misuse of Employers’ Personal Data by Foreign Domestic Helpers for Loan Applications and (2) Publishes Guidance on “Protecting Personal Data Privacy in the Use of Agentic AI”

Hong Kong's Privacy Commissioner's Office has followed up on three cases where foreign domestic helpers misused their employers' personal data for unauthorized loan applications, and simultaneously published new guidance on protecting personal data privacy when using agentic AI systems. The cases highlight risks associated with unauthorized access to employer information by household employees. The guidance addresses how organizations should handle data protection when deploying AI agents that operate autonomously or with minimal human oversight.

What changed

• PCPD follows up on three cases of unauthorized use of employer personal data by foreign domestic helpers seeking loans without consent
• PCPD publishes new guidance document titled 'Protecting Personal Data Privacy in the Use of Agentic AI' to address emerging AI-related privacy risks

Who is affected

Hong Kong: employers using domestic helpers, organizations deploying agentic AI systems, individuals whose personal data may be at risk through household staff access or AI agent operations.

Summary generated by a language model; the official text prevails. Not legal advice.