May 30, 2023

Volume XIII, Number 150


May 29, 2023

Subscribe to Latest Legal News and Analysis

The Philippines and Hong Kong Sign Data Protection Mutual Assistance Agreement

On 22 May 2023, the Philippines’ National Privacy Commission (NPC) and the Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD) signed a Memorandum of Understanding (MOU)[1] to cooperate on data protection matters.

Under the MOU, the authorities will provide mutual assistance in investigations pertaining to cross-border data incidents and breaches, and facilitate information sharing with one another.

The authorities will also collaborate on training and education on current and emerging data protection issues, with a view to fostering a more secure, inclusive, and data-driven digital landscape.

The parties have also agreed to explore and identify suitable organisations from both jurisdictions to participate in a cross-jurisdictional sandbox to test-bed innovative data sharing cases.


While it is certainly not new[2] for regulatory bodies to sign MOUs with one another covering cooperation and mutual assistance in data protection matters, including information sharing in incident and breach investigations, it will be interesting as more and more authorities enter into such arrangements. Among other things, such frameworks will have direct implications on how businesses handle cross-border data privacy compliance, including responding to a multijurisdictional breach and the regulatory investigations that ensue.

[1] “PH, HK sign MOU on Personal Data Protection”, National Privacy Commission and “Privacy Commissioner’s Office Signs MoU with its Philippines Counterpart to Foster Closer Collaboration and Cooperation in Personal Data Privacy Protection”, PCPD

[2] See for instance “Memorandum of Understanding Between OAIC and PDPC”, Personal Data Protection Commission, Singapore (PDPC); “Hong Kong and Singapore Authorities Renew MOU to Maintain Close Ties and Foster Closer Collaboration in Personal Data Protection”, PDPC; and “UK ICO and PDPC Sign MOU for Mutual Regulatory Interest”, PDPC.

© Copyright 2023 Squire Patton Boggs (US) LLPNational Law Review, Volume XIII, Number 143

About this Author

Nicholas Chan Private Equity/Venture Capital Attorney Squire Patton Boggs Hong Kong

Nicholas (Nick) Chan is an experienced private equity/venture capital, merger and acquisition, commercial and compliance, TMT, employment, competition and regulatory lawyer with a computer science background and a regional practice covering 22 countries. He focuses on the telecommunications, broadcasting, information and emerging technologies, healthcare, aviation, energy, real estate, entertainment, advertising, logistics, global sourcing, petroleum and related industries. His expertise has been recognized in AsiaLaw Leading Lawyers since 2004. Most recently recognizing his...

852 2103-0388
Charmian Aw Cybersecurity Corporate Attorney Singapore

For more than 16 years, Charmian Aw has represented market-leading global corporations in navigating the increasingly complex, diverse and fast-evolving tech and data legal landscape in the Asia Pacific region.

Having obtained certifications in information privacy for Asia, Europe and the US (FIP, CIPP/A, CIPP/EU, CIPP/US, CIPM), Charmian has spearheaded multijurisdictional projects (covering up to 82 jurisdictions) on regulatory compliance, data governance, cybersecurity readiness and cross-border transfers.

She has...