{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","Global Data Privacy Guide"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"MdME","José Leitão"]
[]
[]
[]
["Global Data Privacy Guide"]
[]
["Report Generated: 5/1/2025"]
[]
["View your report results on next tab"]

{"sheet":"Global Data Privacy Guide","index":1,"n_rows":16,"n_cols":2,"rows_kept":16,"cut":false,"hidden":false,"merged":[]}
["Question","Macau"]
["Key Legislation Overview"]
["What is the key legislation?","Law No. 8/2005 (the “\nData Protection Law”), which sets the legal regime for collecting, processing and transferring personal data.\n"]
["Key Data Protection Provisions"]
["What data is protected?","Personal Data, being information about an identifiable individual is protected. \n"]
["Who is subject to privacy obligations?","Any individual or collective persons wishing to collect, treat and/or transfer personal data\n"]
["What are the principles applicable to personal data processing?","Generally, personal information must be collected from the individual concerned and must only be collected for a lawful purpose connected with a function or activity of the person/ entity collecting/ treating the personal data. The individual must be made aware of certain matters before collection.\n"]
["How is the processing of personal data regulated?","Subject to specific exceptions, persons/entities covered by these provisions may only use or disclose personal information for the purpose for which it was collected.\n"]
["How are storage, security and retention of personal data regulated?","Personal information must be protected from unauthorized loss, use, modification or disclosure with reasonable security safeguards. persons/entities covered by these provisions must not keep personal information for longer than is required.\n"]
["What are the data subjects' rights?","An individual is entitled to have access to any personal information about them held by persons/entities covered by these provisions. An individual may request correction/amendment/reply of personal information.\n"]
["Are there restrictions on cross-border data transfers?","Persons/entities covered by these provisions wishing to transfer personal information out of Macau must still comply with certain information privacy principles. \n"]
["Are there any notification requirements for data breaches?","There are no mandatory reporting requirements for data breaches.\n"]
["Who is the privacy regulator?","The Macau Data Privacy Office (the “\nMDPO”)\n"]
["What are the consequences of a privacy breach?","Consequences of privacy breach include fines, potential criminal sentences and and accessory sanctions\n"]
["How is electronic marketing regulated?","No specific regulation at this stage, direct marketing is subject to specific restrictions\n"]
["Are there any recent developments or expected reforms?","Changes in MDPO framework; envisaged changes to \nData Protection Law.\n"]