1. International Data Transfers: Required if employee data may be transferred outside Hong Kong

2. Biometric Data Processing: Required if the employer collects biometric data such as fingerprints or facial recognition

3. Monitoring Activities: Required if the employer conducts workplace monitoring, CCTV surveillance, or electronic monitoring

4. Sensitive Personal Data: Required if collecting health records, criminal records, or other sensitive personal information

5. Direct Marketing: Required if employee data might be used for any direct marketing purposes

6. Automated Decision Making: Required if the employer uses automated processing to make decisions about employees

1. Schedule 1: Detailed Data Categories: Comprehensive list of all types of personal data collected, categorized by department or purpose

2. Schedule 2: Third Party Recipients: List of categories of third parties who may receive personal data and the purposes of such transfers

3. Schedule 3: Security Measures: Detailed description of technical and organizational measures used to protect personal data

4. Appendix A: Employee Rights Guide: Detailed guide on how employees can exercise their rights under the PDPO

5. Appendix B: Privacy Policy: Company's general privacy policy that applies in addition to this specific consent

6. Appendix C: Data Retention Schedule: Detailed information about retention periods for different categories of personal data