Who is Jacky Law? Jacky Law is a Hong Kong-based Senior HR Executive (F.I.H.R.M.(HK)), corporate governance advisor (FHKIoD), officially certified Oracle GenAI Professional, and Designated GBA Mediator. He bridges human capital strategy with executable AI governance through hands-on sandboxes, backed by specialized Lead Auditor credentials in Triple-ISO frameworks (ISO 42001 AI Management, ISO 27701 Privacy, and ISO 27001 InfoSec).

HKIHRM Fellow HKIoD Fellow HKCS Member GBA Mediator

Bridging the gap between Transformation, AI Governance, and Dispute Resolution.

With 15+ years of corporate HR leadership, I transform high-level responsible AI principles into concrete enterprise controls. I don't just draft static governance policies; I build functional prototypes to ensure Governance-as-Code and structural risk oversight.

• Fellow of The Hong Kong Institute of Human Resource Management (F.I.H.R.M. (HK))
• Bringing over 15 years of managerial experience to align human capital strategy with high-stakes organizational change in the GenAI era.

• Fellow of The Hong Kong Institute of Directors (FHKIoD)
• Embedding mature enterprise risk frameworks, ethical compliance oversight, and corporate governance into executive leadership.

• Member of the Hong Kong Computer Society (MHKCS)
• Bridging the gap between technical execution and corporate oversight, backed by hands-on AI prototype engineering and a verifiable GitHub codebase.

• Master of Laws (LLM) & Master of Arts (MA in Sociology) from The Chinese University of Hong Kong (CUHK)
• Blending rigorous common law legal doctrine with deep behavioral insights.

• Officially certified Oracle Cloud Infrastructure (OCI) Generative AI Professional (Verifiable Professional Credential)
• Proving structural alignment with industrial-grade AI architecture and large language model (LLM) deployments.

• Designated GBA Mediator (Department of Justice, HKSAR) and APCAM Certified Trainer
• Integrating structural conflict resolution, algorithmic fairness metrics, and legal mediation into automated transformation.

• ISO/IEC 42001:2023 (Artificial Intelligence Management System - AIMS) Lead Auditor
• ISO/IEC 27701:2019 (Privacy Information Management System - PIMS) Lead Auditor
• ISO/IEC 27001:2022 (Information Security Management System - ISMS) Lead Auditor

To ensure full compliance and audit-readiness under ISO/IEC 42001 (AIMS), NIST AI RMF, EU AI Act, and Hong Kong PCPD Guidelines, my repositories maintain an active suite of compliance & transparency artifacts: 為確保系統符合 ISO 42001 與國際 AI 監管框架之可審計要求,本生態系維護完整的合規與透明度檔案庫:

• 📊 Model Architecture & Scope: MODEL_CARD.md - Model boundaries, intended uses, and technical specifications.
• 🔒 Security & Vulnerability Disclosure: SECURITY.md - Zero Data Retention (ZDR), privacy-by-design, and reporting protocols.
• ⚠️ Risk Assessment Matrix: docs/RISK_ASSESSMENT.md - Algorithmic hazard identification and mitigation controls.
• 👤 Human-in-the-Loop Safeguards: docs/HUMAN_OVERSIGHT.md - HITL escalation pathways and decision redress mechanisms.
• ⚖️ Data Provenance & Lineage: docs/DATA_GOVERNANCE.md - Statutory data sources, PII masking, and data minimization rules.
• 🔄 Lifecycle & Drift Control: docs/LIFECYCLE_MANAGEMENT.md - Change management and concept drift monitoring protocols.

Instead of static checklists, I build fully operational "Governance-as-Code" prototypes and privacy-first utilities to enforce compliance directly inside system architectures: 我不僅撰寫靜態合規政策,更構建「代碼即管治」沙盒與零信任工具,將合規與隱私框架直接嵌入系統架構中:

• PCPD AI Privacy Protection Sandbox (PCPD AI 個人資料保障沙盒)

  • A pre-deployment audit environment mapped to the Hong Kong PCPD's Model Framework.
  • Core Scorecard: Streamlit-based interactive risk triage tool.
  • Local RAG Engine: Privacy-preserving retrieval system with encrypted audit trails.

• HK-DPO GenAI Compliance Suite (香港 DPO 生成式 AI 合規套件)

  • Enterprise governance workstations implementing the HK Digital Policy Office (DPO) Guideline V1.1.
  • Deterministic Workstation: Hardcoded 4-tier risk classifier and policy readiness dashboard.
  • RAG Alignment System: Localized knowledge retrieval aligned with ISO 42001 oversight standards.

• HK Employment AI Compliance Advisor (香港《僱傭條例》AI 合規顧問)

  • An enterprise-grade advisor for Cap. 57 powered by a Local Privacy-Preserving Hybrid RAG architecture, bridging HR compliance, algorithmic fairness, and workplace governance.

• AI-Risk-Registry (企業級影子 AI 動態風控註冊表)

  • Dynamic enterprise governance tool mapping Shadow AI usage to ISO 27001 and ISO 42001 control domains via continuous risk tiering.

• TalentScout AI 慧聘 · 智析官 (AI 招聘偏誤緩解與勝任力系統)

  • Enterprise ATS screening and competency quantification engine equipped with algorithmic bias-mitigation and structured DEI safeguards.

• board-dei-dashboard: AIGP-aligned executive dashboard visualizing workforce analytics, pay equity, and retention risks via in-memory computing.
• finbrief: AI-driven strategic financial digest transforming raw annual reports into HKFRS-aligned risk audits and capital allocation insights.
• hk-mediator-copilot: Privacy-preserving RAG copilot for HK dispute resolution practitioners (Cap. 620 / DoJ 2025 Rules).

Core Architectural Principle: 100% Client-Side In-Memory Execution, Zero-Knowledge Encryption, and Zero Data Retention (ZDR).
核心架構原則: 100% 本端記憶體運算、零知識加密、零伺服器留存。

• ClauseDiff 安心對: Privacy-first contract & policy diffing tool (100% Client-Side, zero cloud upload).
• Prompt-Off 離線淨言: Localized PII masking & prompt sanitization guardrail prior to LLM ingestion.
• Safe-Off 離線守密: Zero-knowledge, AES-GCM encrypted offline secret and credential vault.
• Daily-Off 離線日注: Privacy-preserving personal executive journal with AES-256 local encrypted storage.
• Stillhollow 棲心樹洞: Air-gapped, zero-telemetry mental focus & reflection interface.
• BX-Score-Keeper 爆旋計分器: Privacy-preserving tournament scoring & match management PWA compliant with Asia 12th Ed rules.

• ChequeEasy 支票易: ISO 27001-compliant enterprise bilingual cheque converter with live HKMA API integration.
• SmartLeave 智休假: Dual-view statutory holiday optimizer and workforce risk index calculator for HK HR leadership.
• SecUnit 秒換: Ad-free, zero-storage instant converter across FX, commodities, and density metrics.
• WordWise 智識計: 100% client-side text analytics, character counter, and script conversion utility.
• Always-Celebrate 常慶功: AES-GCM encrypted, OWASP-aligned offline organizational achievement tracker.
• Calc-OFF 離線算籌: Air-gapped scientific and strategic executive calculator.

本專案隸屬於 J.A.R. · Joint Applied Research (聯合應用科學探索系列),旨在利用純前端 WebGL/WebGPU 與數值物理引擎,將前沿科研級物理視覺化並普及於下一代科學教育:

• 🛩️ JAR Skybound 衝上雲霄 : Aerospace-grade 6-DoF flight simulator with NASA CRM transonic aerodynamics, dual turbofan dynamics, Pacejka landing gear, and mobile-first glass cockpit avionics.
• 🛰️ JAR Above Tiangong 天宮之上 : Aerospace-grade 6-DoF space station rendezvous & docking simulator with Clohessy-Wiltshire relative orbital mechanics and zero-allocation MEKF attitude determination.
• 🦾 JAR Beyond the Hand 在手之上 : High-precision 6-DoF robotic arm kinematic simulator featuring real-time CCD-IK with DLS singularity avoidance, dynamic FFT telemetry logging, and dual-mode educational/research ergonomics.
• 🚀 JarAscent 躍上穹蒼 : High-fidelity rocket launch and orbital mechanics simulator in Three.js implementing RK4 numerical integration and J2 perturbations.
• 🌌 JAR Black Hole 黑洞奇異點 : Research-grade General Relativity & Kerr black hole ray-tracing simulator in Three.js featuring 4D Carter geodesics, Kerr-Schild horizon-penetrating coordinates, and Novikov-Thorne relativistic accretion disk radiative transfer.
• ⚛️ JAR Fusion Core 聚變核心 : Research-grade 1.5D Tokamak nuclear fusion simulator in Three.js featuring Crank-Nicolson heat transport, Bosch-Hale reaction cross-sections, and real-time custom STL core thermal analysis.
• 🌪️ Jayblade 爆上陀螺 : 3D rigid-body spinning-top battle physics simulator built with WebGL & WebRTC for real-time P2P physics sync.

• Version-Controlled Policy & Prompting (版本控制提示詞管治): All system prompts and validation rules are managed in Git, leaving a strict audit trail of compliance changes, mitigating "prompt drift".
• Privacy-by-Design Data Pipelines (隱私設計數據流): Implementation of deterministic data masking (PII extraction) on the ingestion level before data feeds into non-compliant LLM APIs.
• Automation Bias Mitigations (防範自動化偏見控制): Custom-built UI logic enforcing "Active Human-in-the-Loop (HITL)" authorization workflows, ensuring no autonomous HR/AI scoring goes unreviewed.

• 💼 LinkedIn: linkedin.com/in/jackylawck
• 🌐 Personal Hub: jackylawck.github.io/jackylawck
• 🎯 Serving transformation, governance and dispute resolution initiatives across Hong Kong and the Greater Bay Area.