Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific and Middle East: 1,929 cases from 40 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Privacy Commissioner for Personal Data (PCPD), Hongkong – 0 % · 1 case
What for?
by topicWho?
by companyWhen?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 1 | – |
| Q4 2025 | 0 | – |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
21 Aug 2025 Kwong's Art Jewellery Trading Company Limited, My Jewelry Management LimitedJewellery companies: data of around 79,400 people stolen – enforcement notices Order
At Kwong's Art Jewellery Trading Company Limited and its retail subsidiary My Jewelry Management Limited, which run their IT systems jointly, an attacker (reported in November 2024) obtained the credentials of an administrator account by brute force, exfiltrated the database and deleted it; around 79,400 individuals were affected, including customers and current and former employees. In its report published on 21 August 2025 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1), among other things because the account of a departed employee had not been deleted in time, server operating systems were outdated and security policies and security assessments were lacking. Both companies were served enforcement notices to remedy the deficiencies and prevent further contraventions.
Delete the accounts of departing staff immediately, keep servers up to date and protect administrator access against brute-force attacks.
Access management for leavers, patch management and protection of administrator accounts
- Authority / court
- Privacy Commissioner for Personal Data (PCPD), Hongkong
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Personal Data (Privacy) Ordinance, Data Protection Principle 4(1); Enforcement Notices
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Published
- 21 Aug 2025
Checked against the official source on 3 Oct 2026 · Direct link