By KYN AI Advisory Team — AI implementation specialists, Singapore
Under Hong Kong's Personal Data (Privacy) Ordinance (PDPO), AI-driven outreach follows the same direct marketing rules as outreach written by hand: tell the person what you will use their data for and to market what, get their consent, and honour an opt-out. Breaking these rules is a criminal offence, with a maximum fine of HK$500,000 and imprisonment for 3 years for most direct marketing offences. An agent that drafts and sends at volume makes each rule a system requirement.
This is a practical checklist, not legal advice. Check the current Ordinance and guidance with the PCPD or a Hong Kong lawyer.
Which Hong Kong rules cover AI outreach?
Two regimes sit side by side.
- The PDPO (Cap. 486), administered by the Privacy Commissioner for Personal Data (PCPD). Its data protection principles govern collection, use, accuracy, security, retention and access. Part 6A adds specific rules for using personal data in direct marketing.
- The Unsolicited Electronic Messages Ordinance (UEMO), administered by the Office of the Communications Authority (OFCA). It covers commercial electronic messages, such as email, SMS and recorded calls, and includes do-not-call registers.
An outreach agent that sends email or WhatsApp-style messages may touch both. The PDPO covers the personal data used to target and write the message. The UEMO covers the sending. Check both for each channel.
What does Part 6A require before you market to someone?
The PCPD's guidance on direct marketing sets out the steps. In plain terms:
- Notify. Before first use of a person's data for direct marketing, tell them you intend to use it, which kinds of data, and which classes of products or services you will market.
- Obtain consent. Get the person's consent, or no objection in the way the Ordinance describes, before you use the data.
- Offer opt-out. Give a free and easy way to stop marketing, and stop when asked.
- Do not pass the data on for gain without express consent. The penalty for providing data to another person for use in direct marketing for gain is higher.
The PCPD's guidance on exercising your right of consent to and opt-out from direct marketing states the maximum penalties: a fine of HK$500,000 and imprisonment for 3 years for most direct marketing contraventions, and HK$1,000,000 and 5 years where data is provided to another person for use in direct marketing for gain.
Sentences have often been far below the maximum. In 2025 a debt collection agency was fined HK$2,500 on each of two charges, as the PCPD's statement reports. The maximum shows how the law classes the offence, and the conviction itself is a reputational cost.
Where does an AI agent create risk?
Agents change four parts of outreach.
| Step | Agent behaviour | Risk under the rules | |---|---|---| | Finding contacts | Researches a company and finds a person | Collecting personal data for a purpose that was never stated | | Personalising | Writes a first line from the person's profile | Using data beyond the purpose they expected | | Sending | Sends at volume, across channels | Messages to people who opted out or are on a do-not-call register | | Replying | Sorts and answers replies | Missing an opt-out buried in a long reply |
The first line deserves care. A line that cites a company announcement is business information. A line that cites a person's family, home or private posts uses personal data in a way they would not expect. Limit the agent's research sources to business ones you list.
How do you build the checks into the agent?
Write the rules as steps the system cannot skip.
- Source tag. Every contact carries where the data came from and when. No source, no outreach.
- Consent and notice flag. A field that records whether notice was given and consent obtained, with the date. The agent checks it before drafting.
- Suppression list. One list across channels. An opt-out on email stops WhatsApp, SMS and calls within the same run.
- Do-not-call check. Before telephone, SMS or fax messages, check the relevant register with OFCA.
- Opt-out line. Each message carries a free, working way to stop, in the language of the message. Hong Kong outreach is often bilingual in English and Chinese, so check both versions.
- Reply reading. The reply sorter labels "unsubscribe" and "stop" in English and Chinese as a priority class and routes it for immediate suppression.
- Send gate. A named person approves first-touch messages to new contacts. See human approval gates.
- Daily cap. Limit sends per inbox so one error cannot reach thousands.
Log every send with the actor, the source tag and the consent flag. If a complaint reaches the PCPD, the log shows what you did and why.
What about cross-border data and the model provider?
An outreach agent sends contact text to a model. If the model runs outside Hong Kong, that data is transferred. The PDPO's cross-border transfer provision, section 33, has not been brought into force, but the data protection principles still apply: use the data only for the purpose it was collected for, keep it secure, and do not keep it longer than needed. Contract with the model provider for no training on your data and for retention limits. See where AI agent data is stored.
If you also contact people in Singapore, Indonesia or Malaysia, apply the stricter rule per recipient. Singapore's rules are in PDPA and AI agents in Singapore.
How should you handle access and deletion requests?
Under the PDPO, a person can ask for a copy of their personal data and for correction. Agents create extra copies: drafts, logs, prompts. Make a procedure that searches all of them.
- Index contacts by one identifier across systems.
- Keep the log keyed by that identifier so you can list what the agent did.
- Delete or anonymise on request, then record the action.
What does the PCPD say about AI?
The PCPD publishes guidance on AI and personal data, including a model framework for organisations that procure and use AI. Read the current version on the PCPD website before you deploy. In practice it points to the same controls as above: know your data, limit use to the stated purpose, keep a person accountable and keep records.
Where KYN fits
KYN builds outreach with one checkable first line, so a reviewer can see the source behind each personalised sentence, and a reply desk that sorts each reply so opt-outs reach a person at once. Systems run in a cloud account in the client's name. Agents have their own restricted accounts, every action is logged with the actor, and outbound messages wait for a named person. For Hong Kong clients, we build English and Chinese message and opt-out versions.
The first 14 days are a review of your stack and interviews with your team. A full build ships in under 90 days. See sales and security.
Frequently asked questions
Do I need consent to email a business contact in Hong Kong?
If you use their personal data for direct marketing, the PDPO's notice, consent and opt-out steps apply. Separately, the UEMO has rules for commercial electronic messages, including an unsubscribe facility. Check both for the channel you use.
Is an AI-written message treated differently?
No. The rules attach to the use of personal data and to the message, not to who wrote it. An organisation is responsible for what it sends.
What is the maximum penalty?
For most direct marketing offences, a fine of HK$500,000 and 3 years' imprisonment, according to the PCPD. Where data is supplied to another party for use in direct marketing for gain, the maximum is HK$1,000,000 and 5 years.
Checked 30 October 2026.
Curious whether Marketing agents fits your business? Talk to KYN on WhatsApp — no forms, just a conversation.
