PCPD News Issue 29

18 / 32

PCPD News 私隱專員公署通訊 • Issue no. 29
18
Industry Insight
行業聚焦
場景 Scenario 8 社交網絡市場推廣 Social Network Marketing
表：零售服務業保障私隱活動培訓系列
Table: Training Programmes under Privacy Campaign for Retail Industry
日期 Date 活動 Activities
2013.06.25 開展儀式暨研討會
Inaugural ceremony cum Seminar
講座 Seminar
2013.10.03 直接促銷新規管簡介
New Direct Marketing Regime
2013.12.17 《個人資料（私隱）條例》簡介
Introductory to the Personal Data (Privacy) Ordinance
2014.01.28 如何擬備「收集個人資料聲明」及私隱政策
How to prepare Personal Information Collection Statement and Privacy
Policy Statement
2014.02.19 善用資訊及通訊科技
Use Information and Communications Technology Smartly
2014.02.26
2014.04.28
2014.05.29
2014.06.23
「零售業保障私隱面觀」
Retail Operation
2014.03-06 個人資料（私隱）條例簡介（會員公司包班）
In-house seminar on Personal Data (Privacy) Ordinance
2014.06 個人資料（私隱）條例簡介（中小企零售商）
Introduction to Personal Data (Privacy) Ordinance for SME Retailers
專業研習班 Professional Workshop
2013.10.29 人力資源管理的資料保障
Data Protection in Human Resource Management
2013.11.22 直接促銷活動的資料保障
Data Protection in Direct Marketing Activities
2014.03.31 資料保障法律研習班
Legal Workshop on Data Protection
詳情 Details
食品公司在社交網站上推出有獎遊戲活
動，分享相片，有機會贏得獎品。社交
網站用戶須「讚好」該遊戲專頁才可參
加，並且要同意專頁內含的程式閱取其
張貼在社交網絡的公開帖子。
A food company has launched a prize-
winning game on a social networking
site, whereby participants can win a
prize by sharing their personal photos.
The social network users must “like” the
fan page of the food company to join the
game. Participants are then required to
allow the company to access their posts.
保障私隱錦囊
• 招募會員、攝影比賽、抽獎、投票等
活動涉及明確地收集及使用個人資
料，於收集資料前須提供相應的收集
個人資料聲明。
• 在社交網絡上監察任何人的帖子內容
和活動，可構成收集和使用個人資料，
你需要告知當事人你如此使用他們在
社交網絡上的個人資料。
• 利用程式查閱某人帳戶的個人資料
前，應先徵求用戶的允許。
• 如在社交網絡上利用用戶的「讚好」，
或追蹤個人的網上行蹤，以作產品和
活動推廣用途，應通知當事人及給予
他拒絕參與的選擇。
• 機構委託公司進行網上推廣活動，應
採用合約規範或其他方式要求承辦商
採取切實可行的措施，確保個人資料
的收集、處理和轉移遵從條例規定。
Tips for data privacy
• When the company collects personal
data through member recruitment,
competitions, lucky draws or voting, it
must provide a PICS to its customers.
• If the company intends to monitor
participants’ social network activities,
it must inform the participants.
• The company must obtain the consent
of the participants before accessing
their social network accounts to view
their personal data.
• When making use of “likes” on
social networks or conducting on-
line tracking to promote products or
services, companies should inform the
people concerned and give them the
choice to opt-out.
• If a company engages an agent to
conduct online promotional activities,
the company is required to adopt
contractual or other means to ensure
the agent complies with the Ordinance
in relation to the collection and
processing of personal data.