Response to Media Enquiry or Report

Date: 26 October 2018

Thank you for your enquiry. Our responses are as follows:

Please note that the office of the Privacy Commissioner for Personal Data (PCPD) has initiated a compliance check on Cathay Pacific Airways data breach incident. Please find below the link of the media statement issued by the PCPD regarding this incident on 25 October 2018: https://www.pcpd.org.hk/english/news_events/media_statements/press_20181025.html

Concerning the offences and compensation of the Personal Data (Privacy) Ordinance (the Ordinance), please note that non-compliance with Data Protection Principles of the Ordinance does not constitute a criminal offence directly. The Commissioner may serve an Enforcement Notice to direct the data user to remedy the contravention and/ or instigate the prosecution action. Contravention of an enforcement notice is an offence which could result in a maximum fine of HK$50,000 and imprisonment for 2 years. Please click here for details.