Case Notes

An online store sent invoices containing personal data to customers via unencrypted weblinks... <more>

Mobile Wi-Fi device rental company took inadequate security measures to protect customers’ personal data... <more>

Restaurants took inadequate security measures to protect customers’ information – DPP 4 – security of personal data... <more>

Staff of a property management company disclosed the personal data of residents when using recycled paper – DPP 4 – security of personal data... <more>

A telecommunications company accepted a HKID Card that had been declared lost by a customer – DPP 4 – security of personal data... <more>

Unauthorised access to an international fashion chain’s customer personal data system – DPP 4 – security of personal data... <more>

Disclosure of a customer's payment information to a third party by a travel agency – DPP 3 – use of personal data... <more>

A staff member transferred personal data held by his employer to his personal computer without authorisation – DPP 4 – security of personal data... <more>

This case related to DPP1 - Purpose and manner of collection of personal data... <more>

This case related to DPP1 - Purpose and manner of collection of personal data... <more>

Personal data collection in shopping mall membership programmes and online promotion activities – DPP 1 – purpose and manner of collection of per... <more>

This case related to DPP3 - Use of personal data , DPP4 - Security of personal data... <more>