Q: Is it necessary for a data user to conduct another checking on the accuracy and authenticity of the ID card number of an individual as specified in clause 2.4.3 of the Code of Practice, if the data user collects the ID card number of the individual from a third party, and, if the third party is obliged to comply with the Code of Practice in ensuring the accuracy and authenticity when collecting ID Card number from the individual?
A: It is confirmed that paragraph 2.4.3 of the Code of Practice on the ID Card Number and other Personal Identifiers only applies to the situation where a data user collects an ID card number directly from the individual who is the holder of the ID card in question. In other words, where you, as a data user, receive a record of an ID card number from a party other than the individual who is the holder of the ID card in question you are not required to comply with the requirements of the said paragraph.