Application Guidelines
  • The Office for Personal Data Protection (hereinafter as GPDP) accepts and handles applications for opinions free of charge, in accordance with the Personal Data Protection Act (PDPA).
  • The application for opinions should be made by a controller.
  • The application for opinions should be made in writing and submitted to the GPDP. The applicant should also, in accordance with Article 23 of the PDPA, provide the following information:

    a. name and address of the controller, and the name and address of its representative, if any;

    b. processing purpose;

    c. description of the type(s) data subjects and the type(s) of personal data or information concerned;

    d. the type(s) of data recipients or the type(s) of recipients to whom the data might be disclosed, as well as conditions of data disclosure;

    e. the entity entrusted with the data processing, if the controller does not process the data;

    f. data combination during personal data processing, if any;

    g. preservation period of personal data;

    h. ways and conditions with which the data subjects to be informed of or to rectify their personal data;

    i. proposed transfers of data to third countries; and

    j. a general description enabling a rudimentary assessment on the adequacy of the security measures for data processing under Articles 15 and 16 of the PDPA.

  • If documents are attached, they must be listed clearly and attached with the letter of application in order.
  • Double check the details of the completed form. If an applicant is a legal person or an entity with legal personality, the form should be stamped with an official seal and signed by its person in charge according to the signature of his ID documents. On the other hand, if the applicant is a natural person or an entity without legal personality then it is proved by the signature of the applicant or the personal in charge of the entity according to that on his ID copy as attached, in addition to submitting the required documents as specified on the form.
  • Submitting the completed and signed form to the GPDP can be done by the following methods:

    a. To submit in person to the Office for Personal Data Protection (Address: Av. da Praia Grande, No. 804, Edf. China Plaza, 17.º Andar, Macao).

    b. To submit by post (P.O Box 880, Macao; or to the Office for Personal Data Protection, at Av. da Praia Grande, No. 804, Edf. China Plaza, 17.º Andar, Macao).

  • An applicant should supply further documents as soon as he or she is required by the GPDP.
  • The GPDP shall inform the applicant of the result in writing. The opinions given will be, according to laws, made accessible by the public and published in the GPDP’s annual report.

Address:Avenida da Praia Grande, N.º 804, Edif. China Plaza, 17.º andar, Macau

Tel: (853)28716006

Fax: (853)2871 6116