Case Notes

Unencrypted documents containing personal data were sent to an incorrect email address... <more>

Restaurants took inadequate security measures to protect customers’ information – DPP 4 – security of personal data... <more>

Staff of a property management company disclosed the personal data of residents when using recycled paper – DPP 4 – security of personal data... <more>

A telecommunications company accepted a HKID Card that had been declared lost by a customer – DPP 4 – security of personal data... <more>

An employer posted a list containing the personal data of staff who were to undergo virus testing – DPP 4 – security of personal data... <more>

Staff of a public transport company was doxxed – section 64 of the PDPO – disclosure of personal data... <more>

This case related to provisions on direct marketing... <more>

Unfair audio-recording of conversations with a subordinate by a supervisor – DPP 1 – collection of personal data... <more>

A hospital collected the time spent by a doctor on wards rounds and the number of patients he attended to, without prior notification – DPP 1–col... <more>

Disclosure of a customer's payment information to a third party by a travel agency – DPP 3 – use of personal data... <more>

Accessing a patient's electronic health record for non-medical purposes – DPP 3 – use of personal data... <more>

This case related to provisions on direct marketing... <more>