The University undertakes to observe the spirit and to comply with the principles and requirements of the Personal Data (Privacy) Ordinance and the related personal data laws in its data management policies and practices.