| 個人資料私隱專員公署 | |
| |
| Statutory body overview | |
|---|---|
| Formed | 1 August 1996 |
| Jurisdiction | |
| Headquarters |
|
| Motto | Protect, Respect Personal Data Privacy |
Minister responsible |
|
Deputy Ministers responsible |
|
Key document |
|
| Website | www |
| |
| Politics and government of Hong Kong |
| Related topics |
| Office of the Privacy Commissioner for Personal Data | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| Traditional Chinese | 個人資料私隱專員公署 | ||||||||
| |||||||||
The Office of the Privacy Commissioner for Personal Data (PCPD) is a Hong Kong statutory body enforcing the Personal Data (Privacy) Ordinance.
The Privacy Commissioner is charged with securing the privacy of individuals. The office is headed by the Privacy Commissioner for Personal Data,Ada Chung. [1]
The office is divided into different functional units:Complaints Division,Criminal Investigation Division,Compliance &Enquiries Division,Legal Division,Global Affairs &Research Division,Corporate Communications Division and Corporate Support Division. [2] It has investigatory and enforcement powers,and publishes best practices and other guidance to organizations and the general public. [1] It is a member of various multinational organizations,including the Global Privacy Assembly (GPA),the APEC Cross-border Privacy Enforcement Arrangement (CPEA) and the Global Privacy Enforcement Network (GPEN). [3]
The purpose of this ordinance is to protect the privacy rights of a person in regard to his personal data,ie the Data Subject. The ordinance was passed in 1995. [4]
Data subject refers to :
Examples of data subject protected by this ordinance include name,address,phone number,identity card number,photo,medical record and employment records. The data user,who collects,holds,or process this data is liable for any unlawful or wrongful use of this data. [5]
Reforms to the Personal Data (Privacy) Ordinance,enacted in 2021,gave the PCPD new powers to investigate and prosecute suspected doxxing crimes. [6] Maximum fines are HK$100,000 and 2 years imprisonment,up to HK$1,000,000 and 5 years imprisonment for cases involving harm to victims. [7] In December 2021,it made its first arrests under the new powers,alleging two suspects published information about persons with whom they had a financial dispute. [8]
In 2010,it was reported that Octopus Card issuer has made HK$44 million in the past 4+1⁄2 years by selling cardholder data. This was disclosed in a special hearing conducted by the personal data privacy commissioner. Octopus Holdings chief executive Prudence Chan Bik-wah said she wished to 'sincerely apologise' to affected cardholders. [9]
In August 2010, the Hong Kong Monetary Authority publicly disclosed that CITIC Bank International, Citibank, Fubon Bank, Industrial and Commercial Bank of China, Wing Hang Bank, and Wing Lung Bank were guilty of transferring customer data to unaffiliated parties for marketing purposes. In a separate investigation, the privacy commissioner for personal data concluded that the actions of some of the banks were equivalent to the sale of personal data. [10]
The Registration and Electoral Office reported in March 2017, right after the chief executive election, that they have lost 2 laptop computers containing 3.7 million voters personal information. This could be one of the most significant data breaches ever in Hong Kong, consider the city population is less than 8 million. [11]
Since 2019, a website called HK Leaks has published personal information on more than 2,000 pro-democracy figures. When asked in August 2021 about if the site violated any laws, the PCPD said it would not comment on individual cases, and repeated the same response in May 2023. [12]