Media Statements

The Hong Kong identity card (ID Card) contains sensitive personal data. The leakage of such data may lead to identity theft and perpetration of fraud. Hence, organisations should be particularly careful when they collect and handle the ID Card data of members of the public and ensure compliance with the relevant requirements of the Personal Data (Privacy) Ordinance. The Office of the Privacy Commissioner for Personal Data (PCPD) today issued a new version of the “Code of Practice on the Identity Card Number and other Personal Identifiers: Compliance Guide for Data Users” (the Compliance Guide) to assist organisations in complying with the requirements under the “Code of Practice on the Identity Card Number and other Personal Identifiers” issued by the PCPD as regards the collection, accuracy, retention, use and security of ID Card numbers, copies of the ID Card and other personal identifiers.
 
Furthermore, the PCPD also issued a new version of the information leaflet titled “Your Identity Card Number and Your Privacy” (the Information Leaflet), which explains to the public how to protect their privacy concerning ID Card numbers and copies in different scenarios in their daily lives. These scenarios include the collection of ID card copies by banks, insurance companies or estate agents in compliance with statutory requirements, the collection of ID Card numbers by building security guards, and when prospective employers can request copies of ID Cards from prospective employees, etc.

The Privacy Commissioner for Personal Data, Ms Ada CHUNG Lai-ling, said, “Different industries may need to collect ID Card numbers or copies from members of the public for identity verification or security purposes in the course of the provision of services from time to time. The PCPD has therefore issued the new Compliance Guide and the Information Leaflet so as to assist organisations to comply with regulatory requirements and to enhance the understanding of members of the public about when organisations could or are required to collect their ID Card numbers or copies, thereby enhancing their vigilance in better safeguarding their personal data privacy and reducing the risks of falling prey to fraudsters.”