August 15, 2026, (Inside AI) — Hong Kong's privacy watchdog reported a 62% jump in data privacy complaints in the first half of 2026, receiving 2,990 cases compared to the same period last year. The information technology sector led with 867 complaints, underscoring how AI-driven data collection is reshaping privacy risks.
Privacy Commissioner for Personal Data Ada Chung Lai-ling urged residents to think twice before sharing personal details during online shopping and membership sign-ups. She said personal data had become a valuable, tradeable commodity in the age of technology. The commissioner spoke on a radio programme on Saturday, linking the rise to the AI era, where data can be collected, processed, and used rapidly at scale.
Chung noted that public awareness of privacy protection has also improved, which may partly explain the increase in reported complaints. She said the office received complaints across multiple sectors, but IT-related cases dominated, reflecting the growing digital footprint of everyday activities.
The surge aligns with global trends. Regulators in Europe and the United States have reported similar spikes in privacy complaints as AI systems become more embedded in consumer services. Hong Kong's figures suggest the city is not immune to the pressures of data-driven business models.
Chung's warning comes as Hong Kong continues to develop its own AI governance framework. The city has been updating its Personal Data (Privacy) Ordinance to address emerging risks, including automated decision-making and cross-border data transfers. The commissioner's office has also issued guidance on AI ethics and data minimization.
Industry analysts note that online shopping and membership programmes often require extensive personal information, from names and addresses to payment details and behavioral data. This data can be aggregated and sold to third parties, creating risks of identity theft, targeted scams, and unwanted profiling.
Chung specifically cautioned against sharing unnecessary details during sign-ups. She said consumers should question why a business needs certain information and whether it is proportionate to the service provided. The commissioner's office has published tips on recognizing excessive data collection practices.
The 867 IT sector complaints include disputes over data breaches, unauthorized access, and misuse of personal information. Chung did not provide a breakdown of specific AI-related cases but said the technology's ability to process data at scale had amplified existing privacy concerns.
Hong Kong's privacy law requires organizations to obtain consent before collecting personal data and to use it only for stated purposes. However, enforcement can be challenging when data flows across borders or through complex AI pipelines. The commissioner's office has been working with international counterparts to address these gaps.
Chung's remarks echo a broader push for data stewardship in Asia. Singapore, Japan, and South Korea have all tightened privacy regulations in recent years, partly in response to AI-driven data collection. Hong Kong's approach has been more incremental, focusing on guidance and public education alongside enforcement.
The commissioner's office plans to increase outreach efforts, including workshops for businesses on responsible data handling. Chung said companies must treat personal data as a liability, not just an asset, and implement robust security measures to prevent breaches.
Looking ahead, the office expects complaint volumes to remain elevated as AI adoption accelerates. Chung said the watchdog would continue to monitor high-risk sectors and take enforcement action where necessary. She urged the public to report suspicious data practices promptly.
For consumers, the message is clear: vigilance is the first line of defense. Chung advised Hongkongers to review privacy policies, limit data sharing to essential fields, and use disposable or masked payment options where possible. She also recommended regularly checking account statements for signs of misuse.
The rise in complaints may also reflect a cultural shift. Hong Kong residents are becoming more aware of their digital rights, and the commissioner's office has made privacy education a priority. Chung said this awareness is a positive development, even if it means more cases to investigate.
As AI systems become more sophisticated, the line between convenience and intrusion blurs. Chung's warning is a reminder that personal data, once shared, is difficult to retract. In the AI era, privacy is not just a legal right but a practical necessity.
