The PCPD is headed by the Privacy Commissioner who has overall responsibility for promoting, monitoring and supervising compliance with the PD(P)O and administering the PCPD. A Deputy Privacy Commissioner assists the Privacy Commissioner in the overall administration and strategic planning of the PCPD. He also has responsibility for policy issues related to personal data privacy.

The Office had a total establishment of 37 staff at the end of the period under review and was organized in 5 divisions:

The Operations Division was responsible for:

• dealing with general enquiries from members of the public and organizations concerning the provisions of the PD(P)O;
  
• receiving and taking action on complaints lodged with the Privacy Commissioner;
  
• handling applications from data users for approval of automated data matching procedures;
  
• providing advice on matters that may affect the privacy of individuals in relation to personal data;
  
• developing policies and procedures on, and undertaking inspections of, personal data systems and making recommendations to the data users concerned for improved compliance with the provisions of the PD(P)O; and
  
• conducting investigations of suspected breaches of the PD(P)O and taking appropriate follow up action to ensure compliance with its provisions.

The Legal Division was responsible for:

• giving legal advice in respect of all aspects of the work of the PCPD and deal with all legal matters;
  
• monitoring developments in overseas data protection laws insofar as they are relevant to the work of the PCPD;
  
• reviewing and reporting on existing and proposed Hong Kong legislation that may affect the privacy of the individual with respect to personal data; and
  
• representing the Privacy Commissioner in any relevant court or Administrative Appeals Board hearings.

The Corporate Communications Division was responsible for:

• developing and implementing promotion and public education programmes;
  
• organizing seminars and presentations for organizations to educate them on the requirements of the PD(P)O; and
  
• responding to press enquiries and arranging press briefings.
  

The Administration Division was responsible for:

• providing administrative support, including financial, human resources, general and information services management;
  
• providing translation services; and
  
• providing secretarial support to the Personal Data (Privacy) Advisory Committee.
  

The Policy Division was responsible for:

• developing policy positions on issues with respect to privacy in relation to personal data;
  
• undertaking comparative research and drafting position papers on such issues for publication by the Privacy Commissioner; and
  
• assisting in the preparation of codes of practice.