Thank you very much for your email enquiry on parents’ concerns about their children being bullied in the cyber world. Our responses are as follows:
1. From year 2012 to 2016, the numbers of complaints received by the PCPD in relation to the use of information communication technology (ICT) were summarised as follows:
Table: Privacy Complaints in relation to the Use of ICT (2012 – 2016)
|
ICT-related privacy complaints[1] |
Cyber-bullying |
Use of mobile apps |
Disclosure or leakage of personal data on the Internet |
Use of social networking websites |
2016 |
229 |
26 |
61 |
91 |
86 |
2015 |
241 |
22 |
71 |
85 |
90 |
2014 |
206 |
34 |
58 |
57 |
99 |
2013 |
93 |
6 |
22 |
42 |
45 |
2012 |
50 |
13 |
18 |
12 |
16 |
Over the past five years, the PCPD has seen an upward trend in ICT-related complaints. Cyber-bullying, being one of the major ICT-related disputes, is on the rise (a double increase in 2016 as compared with the 2012 figure).
2. While we will not disclose information about specific cases, the following two examples demonstrate the risks in sharing information online:-
a. Disclosing ex-girlfriend’s information on social website – the complainant was dissatisfied with his ex-boyfriend for posting her photos and false statements on a social website.
b. Attacking the others on online forum – a number of netizens posted slanderous messages against the complainant on an online discussion forum, and used his photos without permission for making offensive comments on him.
Please also refer to the leaflet “Cyber-bullying – What you need to know” issued by the Privacy Commissioner for more relevant examples.
3. Currently cyber-bullying can be addressed by various existing legislations, depending on the circumstances in which cyber-bullying occurs (e.g. defamation, criminal intimidation and infringement of intellectual property). Where cyber-bullying engages the collection[2] and use[3] of personal data, the requirements of the Data Protection Principles (“DPPs”) under the Personal Data (Privacy) Ordinance (“Ordinance”) are relevant. That said, violations of DPPs may be exempted under section 52 of the Ordinance where personal data is held by an individual and is (a) concerned only with the management of his personal, family or household affairs; or (b) so held only for recreational purposes.
In view that cyber-bullying is a complex societal issue and is not solely related to the sharing of personal data, the Privacy Commissioner maintains an open mind on the suggestion of introducing a specific legislation governing cyber-bullying. Views of the public would certainly be one of the considerations for pursuing any suggestion for regulating by way of legislative measure, which is primarily the decision of the Government policy bureau.
It is nevertheless widely accepted that to combat cyber-bullying, education is always better than deterrence. In order to effectively curb the problem of cyber-bullying, the Privacy Commissioner believes that it is fundamental for the individuals, especially children and youngsters often with the advice and assistance of parents and teachers, to learn how to protect their personal data privacy online and respect those of the others. The PCPD has developed a thematic website called “Children Privacy”, which is a one-stop portal for children to learn and understand personal data privacy, as well as for teachers and parents to help those under their care in protecting their personal data. A leaflet entitled “Cyber-bullying – What you need to know” was issued to remind the members of the public of the privacy and legal issues associated with cyber-bullying. More tips on how to protect personal data privacy when using social network platforms can be found in the “Protecting Online Privacy – Be Smart on Social Networks” leaflet.
4. Parents are role models for children. They should have a role of guidance in personal data protection, and to instill in their children the concept of respecting others’ privacy. The Privacy Commissioner has issued a leaflet entitled “Children Online Privacy – Practical Tips for Parents and Teachers” that provides tips for parents to take precautionary steps for protecting children privacy, including:
The information can be attributed to the Privacy Commissioner for Personal Data, Mr Stephen Kai-yi Wong.
[1] As a complaint may cut across different categories, figures in the categories added up may exceed the total number of complaints.
[2] Data Protection Principle 1 – Data Collection Principle: Personal data must be collected in a lawful and fair way, for a purpose directly related to a function /activity of the data user. Data subjects must be notified of the purpose and the classes of persons to whom the data may be transferred. Data collected should be necessary but not excessive.
[3] Data Protection Principle 3 – Data Use Principle: Personal data must be used for the purpose for which the data is collected or for a directly related purpose, unless voluntary and explicit consent with a new purpose is obtained from the data subject.