Case Notes

An online store sent invoices containing personal data to customers via unencrypted weblinks... <more>

Mobile Wi-Fi device rental company took inadequate security measures to protect customers’ personal data... <more>

A folder that contained personal data of students and parents was accidentally disposed of – DPP 4 – security of personal data... <more>

A staff member of a sports organisation accidentally uploaded and transmitted the personal data of event participants – DPP 4 – security of perso... <more>

An educational institution’s improper password management led to unauthorised access to the personal data of students and parents – DPP 4 – secur... <more>

Unencrypted documents containing personal data were sent to an incorrect email address... <more>

Loss of notebook computer under work-from-home arrangements – DPP 4 – security of personal data... <more>

Unauthorised photo-taking in a hospital – DPP 4 – security of personal data... <more>

Unauthorised access to a clinical centre’s customer personal data system – DPP 4 – security of personal data... <more>

Restaurants took inadequate security measures to protect customers’ information – DPP 4 – security of personal data... <more>

Staff of a property management company disclosed the personal data of residents when using recycled paper – DPP 4 – security of personal data... <more>

A telecommunications company accepted a HKID Card that had been declared lost by a customer – DPP 4 – security of personal data... <more>