Collection of the ID number and copy by data user is permissible if such collection is required under any code, rules regulations or guidelines applicable to the data user issued by a regulatory or professional body, which requirement has been endorsed in writing by the Privacy Commissioner in accordance with Data Protection Principle 1 of the Ordinance.

Q: Can securities brokers continue to collect copies of the ID cards of their customers under the Code of the Practice on the ID card number and other Personal Identifiers ("the Code")?

A: Pursuant to paragraph 3.2.2.2 of the Code the Privacy Commissioner has endorsed certain requirements by the Securities and Futures Commission (SFC") on registered persons and licensed traders to collect copies of the ID cards of their customers. Accordingly, parties that are subject to the said requirements may continue to collect copies of identity under the Code. SFC has written to both the Stock Exchange and Futures Exchanges informing them of the details of the endorsement referred above.