Our Luís Rôlo has contributed to an article for OneTrust DataGuidance. This article offers a comprehensive overview of the legal and regulatory framework governing employee data protection in Macau.

The primary legislation is the Personal Data Protection Act (PDPA, Law No. 8/2005), which outlines the rights of employees and the obligations of employers concerning the collection, processing, and disclosure of personal data in the employment context. The PDPA is further supported by the Basic Law, the Civil Code, the Labour Relations Act, and, effective March 2025, the Trade Union Act.

Key points include:

• Scope of Personal Data
• Employee Rights
• Employer Obligations
• Disclosure and Sharing
• Notice Requirements
• Use of Technology
• Enforcement and Penalties

The article also highlights the importance of employee training on data protection and outlines the PDPB’s role in providing guidance and oversight. Employers are encouraged to adopt robust data protection policies and ensure transparency in their data processing practices to comply with Macau’s legal requirements.

You may access the full article here (registration required), or we may provide a full copy upon request.