Who is Jacky Law? Jacky Law is a Hong Kong-based Senior HR Executive (F.I.H.R.M.(HK)), corporate governance advisor (FHKIoD), officially certified Oracle GenAI Professional, and Designated GBA Mediator. He bridges human capital strategy with executable AI governance through hands-on sandboxes, backed by specialized Lead Auditor credentials in Triple-ISO frameworks (ISO 42001 AI Management, ISO 27701 Privacy, and ISO 27001 InfoSec).

Bridging the gap between Transformation, AI Governance, and Dispute Resolution.

With 15+ years of corporate HR leadership, I transform high-level responsible AI principles into concrete enterprise controls. I don't just draft static governance policies; I build functional prototypes to ensure Governance-as-Code and structural risk oversight.

• Fellow of The Hong Kong Institute of Human Resource Management (F.I.H.R.M. (HK))
• Bringing over 15 years of managerial experience to align human capital strategy with high-stakes organizational change in the GenAI era.

• Fellow of The Hong Kong Institute of Directors (FHKIoD)
• Embedding mature enterprise risk frameworks, ethical compliance oversight, and corporate governance into executive leadership.

• Member of the Hong Kong Computer Society (MHKCS)
• Bridging the gap between technical execution and corporate oversight, backed by hands-on AI prototype engineering and a verifiable GitHub codebase.

• Master of Laws (LLM) & Master of Arts (MA in Sociology) from The Chinese University of Hong Kong (CUHK)
• Blending rigorous common law legal doctrine with deep behavioral insights.

• Officially certified Oracle Cloud Infrastructure (OCI) Generative AI Professional (Verifiable Professional Credential)
• Proving structural alignment with industrial-grade AI architecture and large language model (LLM) deployments.

• Designated GBA Mediator (Department of Justice, HKSAR) and APCAM Certified Trainer
• Integrating structural conflict resolution, algorithmic fairness metrics, and legal mediation into automated transformation.

• ISO/IEC 42001:2023 (Artificial Intelligence Management System - AIMS) Lead Auditor
• ISO/IEC 27701:2019 (Privacy Information Management System - PIMS) Lead Auditor
• ISO/IEC 27001:2022 (Information Security Management System - ISMS) Lead Auditor

To ensure full compliance and audit-readiness under ISO/IEC 42001 (AIMS), NIST AI RMF, EU AI Act, and Hong Kong PCPD Guidelines, my repositories maintain an active suite of compliance & transparency artifacts: 為確保系統符合 ISO 42001 與國際 AI 監管框架之可審計要求，本生態系維護完整的合規與透明度檔案庫：

• 📊 Model Architecture & Scope:MODEL_CARD.md - Model boundaries, intended uses, and technical specifications.
• 🔒 Security & Vulnerability Disclosure:SECURITY.md - Zero Data Retention (ZDR), privacy-by-design, and reporting protocols.
• ⚠️Risk Assessment Matrix:docs/RISK_ASSESSMENT.md - Algorithmic hazard identification and mitigation controls.
• 👤 Human-in-the-Loop Safeguards:docs/HUMAN_OVERSIGHT.md - HITL escalation pathways and decision redress mechanisms.
• ⚖️ Data Provenance & Lineage:docs/DATA_GOVERNANCE.md - Statutory data sources, PII masking, and data minimization rules.
• 🔄 Lifecycle & Drift Control:docs/LIFECYCLE_MANAGEMENT.md - Change management and concept drift monitoring protocols.

Instead of static checklists, I build fully operational "Governance-as-Code" prototypes and privacy-first utilities to enforce compliance directly inside system architectures: 我不僅撰寫靜態合規政策，更構建「代碼即管治」沙盒與零信任工具，將合規與隱私框架直接嵌入系統架構中：

• PCPD AI Privacy Protection Sandbox (PCPD AI 個人資料保障沙盒)

  • A pre-deployment audit environment mapped to the Hong Kong PCPD's Model Framework.
  • Core Scorecard: Streamlit-based interactive risk triage tool.
  • Local RAG Engine: Privacy-preserving retrieval system with encrypted audit trails.

• HK-DPO GenAI Compliance Suite (香港 DPO 生成式 AI 合規套件)

  • Enterprise governance workstations implementing the HK Digital Policy Office (DPO) Guideline V1.1.
  • Deterministic Workstation: Hardcoded 4-tier risk classifier and policy readiness dashboard.
  • RAG Alignment System: Localized knowledge retrieval aligned with ISO 42001 oversight standards.

• HK Employment AI Compliance Advisor (香港《僱傭條例》AI 合規顧問)

  • An enterprise-grade advisor for Cap. 57 powered by a Local Privacy-Preserving Hybrid RAG architecture, bridging HR compliance, algorithmic fairness, and workplace governance.

• AI-Risk-Registry (企業級影子 AI 動態風控註冊表)

  • Dynamic enterprise governance tool mapping Shadow AI usage to ISO 27001 and ISO 42001 control domains via continuous risk tiering.

• TalentScout AI 慧聘 · 智析官 (AI 招聘偏誤緩解與勝任力系統)

  • Enterprise ATS screening and competency quantification engine equipped with algorithmic bias-mitigation and structured DEI safeguards.

• board-dei-dashboard: AIGP-aligned executive dashboard visualizing workforce analytics, pay equity, and retention risks via in-memory computing.
• finbrief: AI-driven strategic financial digest transforming raw annual reports into HKFRS-aligned risk audits and capital allocation insights.
• hk-mediator-copilot: Privacy-preserving RAG copilot for HK dispute resolution practitioners (Cap. 620 / DoJ 2025 Rules).

Core Architectural Principle: 100% Client-Side In-Memory Execution, Zero-Knowledge Encryption, and Zero Data Retention (ZDR).
核心架構原則： 100% 本端記憶體運算、零知識加密、零伺服器留存。

• ClauseDiff 安心對: Privacy-first contract & policy diffing tool (100% Client-Side, zero cloud upload).
• Prompt-Off 離線淨言: Localized PII masking & prompt sanitization guardrail prior to LLM ingestion.
• Safe-Off 離線守密: Zero-knowledge, AES-GCM encrypted offline secret and credential vault.
• Daily-Off 離線日注: Privacy-preserving personal executive journal with AES-256 local encrypted storage.
• Stillhollow 棲心樹洞: Air-gapped, zero-telemetry mental focus & reflection interface.

• ChequeEasy 支票易: ISO 27001-compliant enterprise bilingual cheque converter with live HKMA API integration.
• SmartLeave 智休假: Dual-view statutory holiday optimizer and workforce risk index calculator for HK HR leadership.
• SecUnit 秒換: Ad-free, zero-storage instant converter across FX, commodities, and density metrics.
• WordWise 智識計: 100% client-side text analytics, character counter, and script conversion utility.
• Always-Celebrate 常慶功: AES-GCM encrypted, OWASP-aligned offline organizational achievement tracker.
• Calc-OFF 離線算籌: Air-gapped scientific and strategic executive calculator.

• JarAscent 3D 躍上穹蒼: High-fidelity rocket launch and orbital mechanics simulator in Three.js implementing RK4 numerical integration and J2 perturbations.
• Jayblade 爆上陀螺: 3D rigid-body spinning-top battle physics simulator built with WebGL & WebRTC for real-time P2P physics sync.
• BX-Score-Keeper 爆旋計分器: Privacy-preserving tournament scoring & match management PWA compliant with Asia 12th Ed rules.

• Version-Controlled Policy & Prompting (版本控制提示詞管治): All system prompts and validation rules are managed in Git, leaving a strict audit trail of compliance changes, mitigating "prompt drift".
• Privacy-by-Design Data Pipelines (隱私設計數據流): Implementation of deterministic data masking (PII extraction) on the ingestion level before data feeds into non-compliant LLM APIs.
• Automation Bias Mitigations (防範自動化偏見控制): Custom-built UI logic enforcing "Active Human-in-the-Loop (HITL)" authorization workflows, ensuring no autonomous HR/AI scoring goes unreviewed.

• 💼 LinkedIn:linkedin.com/in/jackylawck
• 🌐 Personal Hub:jackylawck.github.io/jackylawck
• 🎯 Serving transformation, governance and dispute resolution initiatives across Hong Kong and the Greater Bay Area.