Fill Easy Completes PCPD Inspection on GBA Standard Contract Compliance

Fill Easy has completed a PCPD inspection of our cross-boundary data transfer operations under the GBA Standard Contract.

Fill Easy Limited has successfully completed an inspection by the Office of the Privacy Commissioner for Personal Data (PCPD) covering our cross-boundary data transfer operations under the GBA Standard Contract framework.

What the review covered

The PCPD conducted a thorough review — document examination, three rounds of enquiries, and an on-site inspection — of the personal data system supporting our cross-border data flows between Mainland China and Hong Kong.

Areas of good practice recognised

The Commissioner recognised several areas of good practice in our operations, including:

• Our Cross-border Data Exchange Platform, built on "zero human access," least-privilege and role-based access principles, with end-to-end encryption and IP whitelisting
• Quarterly and semi-annual security reviews, penetration testing and internal audits

For our banking and insurance partners, an independent review by the privacy regulator is exactly the kind of assurance that makes compliant cross-border onboarding possible.