Case Notes

A travel agency requesting membership registrants to provide personal data must not collect excessive personal data and must inform data subjects... <more>

A bank disclosed a data subject's bank account information to the Police without the data subject’s prescribed consent and without carefully co... <more>

The appeal related to whether the subject data access request involved the complainant’s personal data.... <more>

The appeal related to whether non-provision of the data would render the complainant’s case not a “complaint” under section 37 of the Ordin... <more>

This page only provides Chinese version temporarily... <more>

A theme park collected the full date of birth from individuals applying for an annual pass.... <more>

Whether the Company had taken all practicable steps to ensure that the Complainant's address used by it was accurate... <more>

The appeal related to whether an enforcement notice should be served despite the fact that the company had taken remedial action to remedy the co... <more>

This page only provides Chinese version temporarily... <more>

A messenger of a law firm requested a receptionist to sign on a copy of a letter addressing to the complainant as acknowledgement of receipt ther... <more>

This page only provides Chinese version temporarily... <more>

Whether the Recordings contained any personal data of the Complainant as defined in section 2 of the Ordinance... <more>