On November 4, 2018, the Privacy Commissioner for Personal Data (PCPD) in Hong Kong released a statement that provides the public and interested stakeholders with details on data breaches and associated issues that could raise public concerns. The announcement follows questions received by the PCPD in relation to the data breach notification filed by Cathay Pacific Airways and aims to shed light on the facts of the case and the relevant legal framework.