Skip navigation

Information security

Applying authorization from the PDPB

Service introduction

The Personal Data Protection Bureau legally issues authorization for personal data processing in accordance with the Personal Data Protection Act.

  • Personal data combination [Article 22(1)(3) of the Personal Data Protection Act]
  • Using personal data for purposes not giving rise to their collection [Article 22(1)(4) of the Personal Data Protection Act]
  • Processing of sensitive data is necessary for vital public interests and is essential for exercising the statutory duties and legal competence of the controller [Article 22(1)(1) of the Personal Data Protection Act]
  • Processing of personal data relating to credit and the solvency of the data subjects [Article 22(1)(2) of the Personal Data Protection Act]
  • The storing of data is for legitimate interests and aims at historical, statistical or scientific purposes for longer retention periods [Article 5(2) of the Personal Data Protection Act]
  • If data are held in manual filing systems and kept solely for the purposes of historical research need not be brought into conformity with Articles 7, 8 and 9, provided that they will not be reused for a different purpose [Article 45(3) of the Personal Data Protection Act]
  • A transfer of personal data to a destination in which the legal system does not ensure an adequate level of protection, and provided that the controller adduces adequate safeguards with respect to the protection of the privacy and fundamental rights and freedoms of individuals and with respect to their exercise, particularly by means of appropriate contractual clauses [Article 20(2) of the Personal Data Protection Act]
  • Transfer of personal data to CTM (HK) Data Centre [Opinion No. 0016/P/2018/GPDP]

Service targets

The data controller, or its representative, who is required to apply for an authorization for personal data processing, for any specific situation, according to the Personal Data Protection Act from the Personal Data Protection Bureau.

Result of service

The Personal Data Protection Bureau shall inform the applicant of the result in writing. The authorization given will be, according to laws, registered and made accessible by the public and published in the Personal Data Protection Bureau’s annual report.


Means of enquiry

Responsible Department:Personal Data Protection Bureau

Address:Avenida da Praia Grande, N.º 804, Edif. China Plaza, 17.º andar, Macau

Mailing Address:Macao P.O. Box 880

Tel:(853)2871 6006

Fax:(853)2871 6116

Email:info@dspdp.gov.mo

Website:www.dspdp.gov.mo


Content provider: Personal Data Protection Bureau (DSPDP)

Last modified: 2024-11-19 17:03

Information security Public safety and migration

All information on this site is based on the official language of the Macao Special Administrative Region. The English version is the translation from the Chinese originals and is provided for reference only. If you find that some of the contents do not have an English version, please refer to the Traditional Chinese or Portuguese versions.