On March 31, the Office of the Privacy Commissioner for Personal Data (PCPD) of the Hong Kong Special Administrative Region (SAR) Government issued the "Guidance Checklist for Employees' Use of Generative AI." Privacy Commissioner for Personal Data, Chung Lai-ling, emphasized that this guidance is designed to aid organizations in formulating internal policies that guarantee the secure and responsible use of generative AI by their staff. The "Guidance Checklist" advises organizations to:

• Clearly identify and authorize specific generative AI tools for use, encompassing both publicly accessible and internally developed solutions, and delineate their intended purposes, such as drafting documents and summarizing information.
• Provide precise guidelines on the types and quantities of information that may be input into generative AI tools, with a particular focus on whether these inputs contain personal data or other sensitive information.
• Stress that employees must refrain from using generative AI for any illegal or harmful activities and hold the responsibility to validate the accuracy of AI-generated content, for instance, through thorough proofreading and fact-checking.
• Clearly outline the consequences employees may face for violating established policies or guidelines.

This comprehensive approach aims to ensure that generative AI technology is harnessed ethically and securely within organizational settings.