Program Overview

Course Profile

General Course Information

1.1 Course Details

• Course code: LLAW3075
• Course name: Privacy and Data Protection
• Programme offered under: LLB Programme
• Semester: First
• Designated research course: Not applicable
• Specialization: Not applicable
• Prerequisites / Co-requisites: No
• Course offered to non-law students: No
• Credit point value: 6 credits

1.2 Course Description

This course explores privacy and data protection in an increasingly interconnected data economy, with a focus on developments in Hong Kong. The Personal Data (Privacy) Ordinance and the data protection principles will be studied in depth, making reference to court judgments and Administrative Appeal Board cases. Topics include:

• The concept of privacy, its origins, political/philosophical/economic underpinnings
• Global developments and international cooperation on privacy laws
• Cross-border data flows and data localization
• Online privacy and right to be forgotten
• Privacy vs surveillance
• Balancing privacy and cybersecurity given risks like the unprecedented scale of data collection and analysis enabled by AI

The course will focus on privacy and data protection law in Hong Kong and the PRC with reference to the EU and the rest of the world. Regional and international dimensions will also be explored, including Mainland China, OECD, and EU legal frameworks. Students will gain an understanding of the philosophical debate around privacy as well as practical legal implications in the age of AI.

1.3 Course Teachers

• Course convenor: Adam Au

Learning Outcomes

2.1 Course Learning Outcomes (CLOs)

• CLO 1: Critically analyze the concept of privacy, including its philosophical, political, and economic foundations, and its balance with security, innovation, and technological advancements.
• CLO 2: Understand and apply key privacy and data protection laws, including the Personal Data (Privacy) Ordinance in Hong Kong, as well as relevant frameworks in Mainland China, the EU, and other international jurisdictions.
• CLO 3: Evaluate the impact of emerging technologies, such as artificial intelligence, on data privacy, cybersecurity, and the ethical implications of large-scale data collection and analysis.
• CLO 4: Examine global developments in privacy law, including cross-border data flows, data localization, online privacy, and the “right to be forgotten,” with reference to recent cases and legal precedents.
• CLO 5: Assess the practical legal and regulatory challenges related to privacy and data protection in the context of banking, global regulatory standards, and future trends in an interconnected data economy.

2.2 LLB Programme Learning Outcomes (PLOs)

• PLO A
• PLO B
• PLO C
• PLO D
• PLO E
• PLO F

Assessment

3.1 Assessment Summary

• Assessment task: Class participation (15%), In-class presentation (25%), Two essays (60%)
• Feedback method: To be determined by course teacher
• Course learning outcomes: 1, 2, 3, 4, 5

3.2 Assessment Detail

To be advised by course convenor(s).

3.3 Grading Criteria

To be advised by course convenor(s).

Learning Activities

4.1 Learning Activity Plan

• Seminar: 3 hours/week for 12 teaching weeks
• Private study time: 9.5 hours/week for 12 teaching weeks

4.2 Details of Learning Activities

To be advised by course convenor(s).

Learning Resources

5.1 Resources

• Reading materials: Posted on Moodle
• Core reading list: To be advised
• Recommended reading list: To be advised