Application Guidelines
  • The Personal Data Protection Bureau (hereinafter as PDPB) accepts and handles applications for opinions free of charge, in accordance with the Personal Data Protection Act (PDPA).
  • The application for opinions should be made by a controller.
  • The application for opinions should be made in writing and submitted to the PDPB. The applicant should also, in accordance with Article 23 of the PDPA, provide the following information:

    a. name and address of the controller, and the name and address of its representative, if any;

    b. processing purpose;

    c. description of the type(s) data subjects and the type(s) of personal data or information concerned;

    d. the type(s) of data recipients or the type(s) of recipients to whom the data might be disclosed, as well as conditions of data disclosure;

    e. the entity entrusted with the data processing, if the controller does not process the data;

    f. data combination during personal data processing, if any;

    g. retention period of personal data;

    h. ways and conditions with which the data subjects to be informed of or to rectify their personal data;

    i. proposed transfers of data to third countries; and

    j. a general description enabling a rudimentary assessment on the adequacy of the security measures for data processing under Articles 15 and 16 of the PDPA.

  • If documents are attached, they must be listed clearly and attached with the letter of application in order.
  • Double check the details of the completed form. If an applicant is a legal person or an entity with legal personality, the form should be stamped with an official seal and signed by its person in charge according to the signature of his ID documents. On the other hand, if the applicant is a natural person or an entity without legal personality then it is proved by the signature of the applicant or the personal in charge of the entity according to that on his ID copy as attached, in addition to submitting the required documents as specified on the form.
  • Submitting the completed and signed form to the PDPB can be done by the following methods:

    a. To submit in person to the Personal Data Protection Bureau (Address: Av. da Praia Grande, No. 804, Edf. China Plaza, 17.º Andar, Macao).

    b. To submit by post (P.O Box 880, Macao; or to the Personal Data Protection Bureau, at Av. da Praia Grande, No. 804, Edf. China Plaza, 17.º Andar, Macao).

  • An applicant should supply further documents as soon as he or she is required by the PDPB.
  • The PDPB shall inform the applicant of the result in writing. The opinions given will be, according to laws, made accessible by the public and published in the PDPB's annual report.

Address:Avenida da Praia Grande, N.º 804, Edif. China Plaza, 17.º andar, Macau

Tel: (853)28716006

Fax: (853)28716116