Skip to content

有紧急法律疑难?请立即致电 (852) 3416 1711 与本行联系。

Cookies and what you need to know

By Allison Lee

Hong Kong, 12 January 2021: Cookies, also known as HTTP Cookies, are text files which are stored on a user’s computer to enable website owners to identity the user’s computer or electronic device. They are generally used by website owners to track a user’s online behaviour or interaction with websites.

These text files typically store information such as the user’s username, language preference and browsing habits. For example, it is a way how website owners serve targeted advertisements which match a user’s browsing preferences.

The widespread use of cookies increasingly raises privacy concerns since a user’s browsing activities are often collected and might also be transferred to third parties without the user’s knowledge and the information might also be used for marketing purposes.

In Hong Kong, personal data covers information which relates to a living individual and can be used to ascertain that individual’s identity. It must also exist in a form in which access to or processing of it is practicable. When determining whether a piece of data is personal data, the totality of the circumstances should be taken into account (see Note 1 below).

In light of the above, when deciding whether cookies in a specific case are personal data, it depends on whether the cookies contain any data that can uniquely identify an individual. Website owners who deploy online tracking that involves the collection of personal data should consider the requirements under the Personal Data (Privacy) Ordinance, including the six Data Protection Principles. 

Website owners intending to use cookies to collect information from users are recommended to:

  1. Inform website users about the kind of information being stored in the cookies, the purpose of collecting the information and how the information is collected;
  2. State whether the websites allow access by users who do not accept the use of cookies and whether there would be any loss of functionality resulting from not accepting cookies.

If the website deploys third-party cookies, the website owner should also set out the type of information being collected and/or transferred and the purposes of collecting the information (Notes 2 & 3).

When cookies are used to collect behavioural information, it is recommended that website owners should:

  1. Set up an appropriate expiry date for the cookies;
  2. Encrypt the contents of the cookies whenever appropriate; and 
  3. Not deploy techniques that disregard browser settings on cookies unless they can provide an alternative to website users to disable the cookies or decline the use of cookies (Note 4).

It is also important for the website owners to offer an option to website users to disable or reject the cookies.

Many countries have recently expanded their regulations to cover cookies in their scope of personal data for better protection of data privacy. For more information, website owners or website users should observe the Guidance on Online Behavioural Tracking issued by the Office of the Privacy Commissioner for Personal Data.


An Associate with Boase Cohen & Collins since 2015, Allison Lee is experienced in the fields of data protection, intellectual property, matrimonial and family matters, and general civil litigation. In addition to her law qualifications, she holds a Master degree in Science specialising in electronic commerce and internet computing. She can be contacted at







  • 这个字段是用于验证目的,应该保持不变。

A rather unpalatable legal process

Hong Kong, 3 March 2021: Fatty foods are off the menu i […]

Read more

All revved up with no place to go

Hong Kong, 24 February 2021: During lunch with a fellow […]

Read more

Fighting an outbreak of dishonesty

By Erica Chong Hong Kong, 22 February 2021: Coronavirus […]

Read more

Two steps forward, one step back

Hong Kong, 17 February 2021: My new-found passion for h […]

Read more

A bay window of opportunity for lawyers

By Alex Liu Hong Kong, 10 February 2021: Hong Kong lawy […]

Read more