Case Notes

A former teacher accidentally shared a file containing personal data of students to the entire school on a cloud-based drive – DPP 4 – security o... <more>

Unauthorised access of personal data held by a clinical centre – DPP 4 – security of personal data... <more>

A bedding products company mandated online shoppers to consent to the use of personal data for direct marketing purposes... <more>

A government department posted a letter to an applicant’s obsolete address... <more>

A financial institution collected excessive personal data from outsourced staff without providing personal information collection statement and r... <more>

Safeguarding clients’ personal data security under Work-from-Home Arrangements... <more>

Storing clients’ documents and ex-employee’s personal data in outsourced storage facilities... <more>

This page only provides Chinese version temporarily... <more>

This page only provides Chinese version temporarily... <more>

Neighbour installing Closed Circuit TV Systems (CCTV) at door entrance... <more>

Visitor Registration... <more>

A school collecting and using teachers’ travel information.... <more>

Whether customers’ personal data could be stored in a cloud system outside Hong Kong.... <more>

Whether a credit reference agency (CRA) could retain a data subject’s consumer credit data after the discharge of bankruptcy.... <more>