The Personal Data Protection Office (GPDP) said in a statement on Wednesday that in order to help the public and the private sector better fulfil their statutory obligations under the Personal Data Protection Act (PDPA), the office has “progressively” improved the procedures for applying for “authorisation”, with a new application form clarifying the information required.
According to the GPDP website, any entities responsible for processing personal data must obtain permission from the office before carrying out certain types of personal information processing. Subject to legal approval, the permission issued by the office and some information relating to the processing of personal data will be disclosed in accordance with the law.
The statement underlined that any entities, which need to process specific data, such as sensitive data, credit and solvency data, and the connection of personal data or change of purpose for processing personal information, must apply for “authorisation” from the office in advance. It added that an application for “authorisation” is also required when involving the transfer of data outside of Macau.
The new “authorisation” application form will be available from now on, and the relevant “notice” form will be optimised at the same time, the statement said, adding that there will be a transition period of more than three months during which the old and new forms will be accepted, while the new form will be fully in use from July.
This screenshot taken from the Personal Data Protection Office (GPDP) website shows its office on the 17th floor of China Plaza on Avenida da Praia Grande.
