PCPD News Issue 28

16 / 24

PCPD News 私隱專員公署通訊•Issue no. 28
16
公署在2013年4 月9日發表調查報告，指
香港預防協會有限公司與翔滙保險策劃
有限公司以誤導及儼如欺詐的手法，收
集市民的個人資料，並用以進行促銷，
違反條例的個人資料保障原則。
多名市民向公署作出投訴，指預防協會
以「響應全民醫療體檢計劃」為名，在電
話中要求市民提供部分身份證號碼及流
動電話號碼等個人資料以登記免費驗身
服務。實際上，投訴人的資料被轉售給
翔滙策劃，投訴人其後收到翔滙發出的
保險產品推銷資訊。
調查指出，預防協會沒有在電話中向投
訴人明確交代擬將他們的個人資料交給
翔滙策劃作直接促銷用途。翔滙策劃在
未得投訴人同意，而使用其個人資料促
銷保險產品，以及不必要地收集身份證
號碼；兩間機構均違反了收集和使用方
面的保障資料原則。
經公署介入後，翔滙策劃已停用投訴人
的個人資料作促銷，並已銷毀他們的
個人資料，及其他未有向翔滙策劃購買
保險產品的人士的部分身份證號碼。不
過，為了糾正違例事項，以及防止違例
的事宜再發生，私隱專員已分別向預防
協會及翔滙策劃送達執行通知，指示兩
間公司制訂保障個人資料的政策及程
序。翔滙策劃已在今年9月30日的期限
前，銷毀所有在涉案推廣計劃下從預防
協會取得的個人資料。
調查報告：
publications/files/R13_1138_c.pdf
An investigation report published by
the PCPD on 9 April 2013 revealed that
the Hong Kong Preventive Association
Limited (“HKPA”) and Aegon Direct
Marketing Services Insurance Broker
(HK) Limited (“Aegon Direct”), in a joint
telemarketing programme, had collected
personal data from the public in a
misleading and arguably deceitful way,
thus breaching the data collection and
use requirements under the Ordinance.
Several persons complained to the
PCPD that the HKPA had collected
their personal data, such as partial
identity card numbers and mobile phone
numbers, over the phone for the purpose
of signing up for a free medical check-up
service that was said to be in support of a
“Universal Medical Check-up Scheme”.
Subsequently, their data was sold to
Aegon Direct and they received direct
marketing messages from Aegon Direct
in relation to insurance products.
The Investigation found that the HKPA
telemarketers had not explicitly informed
the complainants of the intended transfer
of the data to Aegon Direct for use in
direct marketing and that Aegon Direct
had used their personal data in direct
marketing of its insurance products
without obtaining their consent. The
two companies contravened the Data
Protection Principles on the collection
and use of personal data.
After the PCPD’s intervention, Aegon
Direct ceased using the complainants’
personal data in its direct marketing
approaches, and destroyed the records of
their personal data, as well as the records
of the partial identity card numbers of
other direct marketing targets who had
not purchased any insurance products
through Aegon Direct. However, in
order to remedy the contraventions and
prevent any recurrence, the Privacy
Commissioner served an Enforcement
Notice on both companies, and directed
bo t h compan i e s t o d r aw up da t a
protection policies and procedures.
Also, Aegon Direct had destroyed the
personal data it obtained from HKPA by
30 September 2013.
Investigation Report:
english/publications/files/R13_1138_
e.pdf
PCPD in action
公署動態
Mark Your Diary
活動日誌
Resources Updates
資源快訊
Statistics
統計
Glossary
詞彙
Technology Updates
科技新知
調查報告：預防協會與翔匯策劃以儼如欺詐手法收集
市民資料作促銷之用
Investigation Report: HKPA & Aegon Direct collected
personal data for use in direct marketing by arguably
deceitful means
公署在2013年4 月9日就視察港鐵車站公
眾地方及列車車廂的閉路電視系統發表
報告，總結港鐵系統大致上遵從條例規
定，惟港鐵在安裝系統前沒有進行全面
的私隱風險評估；在裝有攝錄鏡頭的地
方向乘客展示的告示有欠清晰；於處理
和銷毁錄影片段方面的政策制訂及推行
方面亦有所不足，有可改進之處。
視察報告：
publications/files/R13_2768_c.pdf
On 9 April 2013, the PCPD published an
inspection report of the Closed-Circuit
Television System (“CCTV system”)
used by the MTR Corporation (“MTRC”)
in train stations and compartments.
The report concluded that the system
complied with the requirements of the
Ordinance, but that improvements were
needed on the content and visibility
of the CCTV notices, as well as in the
enforcement of MTRC’s policy on the
handling and erasure of the CCTV
records and footage. The report pointed
out that a privacy impact assessment
should have been done before the system
was introduced.
Inspection Report:
english/publications/files/R13_2768_
e.pdf
港鐵閉路電視系統視察報告
Inspection of the MTR’s CCTV system concluded