The "due diligence" exemption in Hong Kong's PDPO was meant to apply to?
The "due diligence" exemption in Hong Kong's PDPO was meant to apply to?
The 'due diligence' exemption in Hong Kong's PDPO was meant to apply to companies researching the viability of business mergers. This exemption allows for the sharing of personal data between involved parties to assess the feasibility and risks associated with potential mergers or acquisitions without breaching the data protection principles, provided that the data is not used for direct marketing purposes.
Should be B
4.15 The question may arise as to whether the requirements under this Part applies to the situation where personal data is provided to another person due to a merger or business amalgamation involving a sale of business or shares. The short answer is that the requirements under this Part do not apply if the personal data provided is not for use in direct marketing. Otherwise, consent has to be obtained from the data subject. Data users should be mindful that if the provision is for use in direct marketing under the guise of a merger or acquisition, they are still liable under the Ordinance.