Personal Data (Privacy) Ordinance Part 6 6-2 Section 30 Cap. 486 Part 6 Matching Procedures and Transfers of Personal Data, etc. 30. Matching procedure not to be carried out except with consent of data subject, etc. (1) A data user shall not carry out, whether in whole or in part, a matching procedure— (a) unless and until each individual who is a data subject of the personal data the subject of that procedure has given his prescribed consent to the procedure being carried out; (b) unless and until the Commissioner has consented under section 32 to the procedure being carried out; (c) unless the procedure— (i) belongs to a class of matching procedures specified in a notice under subsection (2); and (ii) is carried out in accordance with the conditions, if any, specified in the notice; or (d) unless it is required or permitted under any provision of any Ordinance specified in Schedule 4. (2) For the purposes of this section, the Commissioner may, by notice in the Gazette, specify— (a) a class of matching procedures; (b) subject to subsection (3), the conditions, if any, subject to which a matching procedure belonging to that class shall be carried out. Verified Copy Last updated date 25.4.2013