PCPD News Issue 30

10 / 32

10
PCPD News 私隱專員公署通訊 • Issue no. 30 專題報道
Cover Story
私隱專員評論
• 送達執行通知，指令翱翔遊在21
日內：–
» 停止向參加「翱翔天地」的申
請人收集出生日期及身份證號
碼
» 停止使用「翱翔天地」於 2013
年 5 月之前採納的申請表，並
進一步修訂新的表格，以刪除
提供出生日期的要求，並即時
落實使用修訂表格
» 停止透過「積分查詢」功能收
集出生日期及身份證號碼
» 完全刪除在「翱翔天地」所收
集的出生日期及身份證號碼
» 聯同縱橫遊在「縱橫遊」程式
根據保障資料第 1(3)(b) 原則的
規定提供《收集個人資料聲明》
• 送達執行通知，指令縱橫遊在 21
日內： –
» 聯同翱翔遊在「縱橫遊」程式
根據保障資料第 1(3)(b) 原則的
規定提供《收集個人資料聲明》
• 個案印證公署於 2013 及 2014 年抽
查應用程式帶出的憂慮，顯示本地
流動應用程式的私隱政策透明度明
顯不足。「縱橫遊」開發及由「翱
翔遊」營運的「網上訂購」及「積分
查詢」程式正是一例子，用戶不能
掌握資料會用於甚麼目的及該資料
可能轉移予甚麼類別的人。
• 向程式用戶提供私隱資訊殊不容
易，因為流動裝置螢幕細小，用戶
多數不會專注閱讀。然而，遵從條
例是必然的法律責任。
• 抽查結果亦顯示大部分程式要求讀
取資料的權限似乎超越該程式功能
的實際需要。「翱翔遊」正是過度
收集資料，而忽略評估收集每項資
料的真正需要。
• 機構有需要廣泛採用應用程式，利
用科技和創意尋找營商之道及增強
競爭力，以吸引更多客戶。 即使技
術不太成熟的機構也知道流動應用
程式的價值，包括提高它們在市場
的知名度以至收集大量個人資料。
• 倉猝推出這些程式的過程中，機構
未必充分了解私隱風險或管理，及
投放足夠資源以識辨或解決有關問
題。 因此，我們看到初涉足數碼世
界的機構新手所犯的毛病越多。
• 擔憂本報告揭示「縱橫遊」及「翱翔
遊」的不當行為，可能只是冰山一
角。
• 呼籲機構以客為本，應用程式可接
觸無數的顧客、客戶和用家。要尊
重用戶的私隱，透明而公開的政策
是必須的。若能有效地保障顧客私
隱，可以贏取他們的信任，建立
忠誠的關係，這正是成功營商的基
石。
調 查 報 告：
enforcement/commissioners_findings/
investigation_reports/files/R14_9945_
c.pdf
The Commissioner’s Comments
• The Commissioner has served an
enforcement notice on Worldwide
Travel directing: -
» Worldwide Package to cease
collection of DOB and ID
number from applicants for
joining the Programme
» Worldwide Package to cease
to use the Form adopted prior
to May 2013 and to further
r e v i s e t h e n ew Fo rm f o r
immediate implementation by
deleting the requirement of
provision of DOB
» Worldwide Package to cease
the collection of DOB and ID
number through the Reward
Points Enquiry function under
the App;
» Wo r l d w i d e Pa c k a g e t o
completely delete from the
Programme the DOB and ID
number collected; and
» Package Tours and Worldwide
Package to provide a“Personal
I n f o r m a t i o n C o l l e c t i o n
Statement ”in the App in the
manne r p r e s c r i bed unde r
DPP1(3)(b)
• The case proved the privacy concern
brought by the PCPD surveys in
2013 and 2014 which revealed
that transparency in terms of
privacy policy of local mobile apps
was clearly inadequate. The App
developed by Package Tours (Hong
Kong) Limited and operated by
Worldwide Package Travel Service
Limited is an example. User is not
able to understand how their data
will be used and to whom the data
will be transferred.
• Conveying privacy information
to consumers can present unique
cha l l enge s i n t he app wo r l d ,
where screens are small and users'
attention can be intermittent. That
said, compliance with the legal
obligations under Ordinance is a
must.
• The survey also found that the
most of the apps seemed to have
sought permissions for data access
beyond what was actually required
based on the app's functionality.
Wo r l dw i d e Tr av e l c o l l e c t e d
excessive personal data without
assessing the genuine need for
collecting individual data items.
• App revolution is a prime example
of the use of technology and
innovation to reinvent competitive
solutions and business models.
Almost every organisation wants an
app to drive more consumer traffic.
Even organisations that are relatively
green in technological maturity
understand the value an app can
provide, from enhancing their
appeal in the market to collecting
enormous amounts of personal data.
• In a rush to adopt apps, they may
not know enough about privacy
risks or management and devote
adequa t e r e s ou rce s t o e i t he r
identify or address them. As a
result, we are seeing an increasing
number of rookie mistakes made
by organisations as they step into
the digital world.
• The malpractice by Package Tours
(Hong Kong) Limited and operated
by Worldwide Package Travel
Service Limited may represent
merely the tip of the iceberg.
• A customer-focused organisation
w i l l a p p r e c i a t e t h a t a n a p p
provides an interface between
the organisation and potentially
millions of customers, clients
and users. The Commissioner
strongly advocates that privacy
po l i c i e s mu s t b e e f f e c t i v e l y
communicated. Transparency is
central to respecting the privacy of
individuals and will be rewarded
with customer trust and loyalty:
t h e c o r n e r s t o n e o f b u s i n e s s
success.
Investigation Report：
english/enforcement/commissioners_
findings/investigation_reports/files/
R14_9945_e.pdf