The Chinese government has passed legislation to protect personal data on the mainland. Hong Kong, being a Special Administrative Region (SAR) of China with its own rules and regulations.
While PIPL does not currently apply to citizens in Hong Kong, that doesn't mean their information can be used freely!