The purpose of this Complaint Handling Policy is:

1. in the case of a complaint under section 37 of the Personal Data (Privacy) Ordinance ("the Ordinance"), to bring to the awareness of the relevant parties the standard policy of the PCPD in handling such complaint, to enable them to have a basic understanding and realistic expectation of how their case is to be handled; and
2. in the event of any subsequent appeal to the Administrative Appeals Board, to enable the Board to give regard to such policy in accordance with section 21(2) of the Administrative Appeals Board Ordinance.

This Complaint Handling Policy covers the handling by the PCPD of any complaint under section 37 of the Ordinance. In particular, it covers the ways in which the Commissioner normally exercises his powers and discretion under Part VII of the Ordinance, including but not limited to the following:

1. the receiving of a complaint under section 37;
2. discretion under section 39(2) to refuse to carry out or continue an investigation;
3. exercising the general powers of investigation under Part VII;
4. issuing of an enforcement notice under section 50; and
5. notifying parties concerned of the appeal right against the decision of the Commissioner.

The Policy

(A) Receiving a complaint under section 37

The term "complaint" is defined in the Ordinance. In summary, a complaint under section 37 must satisfy the following conditions:

1. it is in respect of an act or practice of a data user specified in the complaint, which relates to personal data;
2. the complaint is brought by the individual who is the subject of the data, or by someone else in the capacity of a relevant person of such individual, as defined in the Ordinance; and
3. the act or practice may be a contravention of a requirement under the Ordinance.

If any one of the above conditions is not satisfied, the case may not be treated as a complaint under section 37 of the Ordinance. Accordingly, no investigation will follow as the result of the complaint.

However, where the Commissioner has reasonable grounds to believe that there may have been contravention of a requirement of the Ordinance, which involves personal data other than that of the complainant, he may commence an investigation into the matter on his own initiative under paragraphs (b) and (ii) of section 38.

In any event, the complainant is encouraged first to raise the matter complained of with the party complained against, as they may be able to resolve the dispute without intervention by the PCPD.

(B) Discretion under section 39(2) to refuse to carry out or continue an investigation

Section 39(1) and (2) of the Ordinance contain various grounds on which the Commissioner may exercise his discretion to refuse to carry out or continue an investigation. In applying some of those grounds, the PCPD's policy is as follows:

1. the act or practice specified in a complaint may be considered to be trivial, if the damage (if any) or inconvenience caused to the complainant by such act or practice is seen to be small;
2. the complaint may be considered to be vexatious, if the complainant has habitually and persistently made to the PCPD other complaints against the same or different parties, unless there is seen to be reasonable grounds for making all or most of those complaints;
3. the complaint may be considered to be made not in good faith, if the complaint is seen to be motivated by personal feud or other factors not related to concern for one's privacy.

In addition, an investigation or further investigation may be considered to be unnecessary if:

4. after preliminary enquiry by the PCPD, there is no prima facie evidence of any contravention of the requirements of the Ordinance;
5. the data protection principles are seen to be not engaged at all, in that there has been no collection of personal data. In that connection it is important to note that, according to case law, there is no collection of personal data by a party unless that party is thereby compiling information about an identified person or about a person whom it seeks or intends to identify;
6. the complainant and party complained against are able or should be able to resolve the dispute between them without intervention by the PCPD;
7. given the mediation by the PCPD, remedial action taken by the party complained against or other practical circumstances, the investigation or further investigation of the case cannot be reasonably expected to bring about a more satisfactory result; or
8. the complaint in question or a directly related dispute is currently or soon to be under investigation by another regulatory or law enforcing body.

If any of the above grounds a) to h) is satisfied, the Commissioner may exercise his discretion under section 39(2) to refuse to carry out or continue an investigation.

(C) Exercising general powers of investigation under Part VII

Before the Commissioner invokes his general powers of investigation under Part VII, preliminary enquiries are normally carried out, which may include mediation, to see whether the case can be resolved without a formal investigation. After an investigation has been commenced, the powers available to the Commissioner under the various provisions of Part VII include mainly the following:

1. power under section 43(1)(a) to be furnished with any information, document or thing, from such persons, and to make such inquiries, as he may see fit;
2. power under section 44 to summon before him any person and to examine such person; and
3. power under section 43(2) to conduct a hearing.

Under section 43(1)(b), the Commissioner may regulate his procedure in such manner as he thinks fit. It is a matter for the discretion of the Commissioner which power or powers under Part VII he may decide to exercise in furtherance of an investigation. Generally speaking, under section 64(9), any person who without lawful excuse hinders or fails to provide information to the Commissioner in performing his functions commits an offence under section 64(9).

Under section 46(1), the Commissioner and other staff of the PCPD are obliged to maintain secrecy in respect of any information obtained in an investigation. Therefore, while parties will be informed of the general progress and outcome of their case, the PCPD may not be able to accede to a request for specific information (e.g. for a copy of a letter sent to the PCPD by another party) unless consent is obtained from the relevant party.

(D) Issuing an enforcement notice under section 50

As the result of an investigation, the Commissioner will have the discretionary power to serve on the party complained against an enforcement notice under section 50(1) if one of the following conditions is satisfied:

1. that party is found to be contravening a requirement of the Ordinance; or
2. that party is found to have contravened such a requirement in circumstances that make it likely that the contravention will be repeated.

Where a contravention is found to have occurred but is not continuing, whether the Commissioner considers it likely for the contravention to be repeated in the future may depend on factors including the following:

1. whether the contravention found was a first-time or repeated contravention, accidental or deliberate;
2. whether the party complained against is willing to prepare a written undertaking to the Commissioner regarding improvement to its future conduct in such form as the Commissioner deems fit; or
3. whether the party complained against has shown remorse during the course of the investigation by co-operating fully with the PCPD, taking appropriate remedial actions, etc.

Under section 50(2), in exercising his discretion to serve an enforcement notice, the Commissioner shall consider any damage or distress, or likelihood of such damage or distress, to the complainant. In addition, it is the Commissioner's policy to consider also whether, practically speaking, the serving of an enforcement notice in the circumstances of the case will in fact enable specific steps to be taken to prevent any future repetition of the contravention by the party complained against.

(E) Appeal against the decision of the Commissioner

The complainant may appeal to the Administrative Appeals Board against a decision of the Commissioner not to carry out an investigation of his complaint or, if there is an investigation, not to issue an enforcement notice against the relevant data user in consequence of the investigation, in accordance with sections 39(4) and 47(4) of the Ordinance respectively. As required by section 9 of the Administrative Appeals Board Ordinance, the notice of appeal has to be lodged with the Secretary to the Board within 28 days after receiving notice of the Commissioner's decision. On the other hand, pursuant to section 50(7) of the Ordinance, the relevant data user may also appeal to the Board against an enforcement notice issued by the Commissioner not later than 14 days after the notice was served. Further enquiries about appeal may be made by writing to the Secretary to the Board at Room 140, Central Government Offices, East Wing, Lower Albert Road, Hong Kong or by calling 2810 2092.

The above Policy is for reference only. The PCPD reserves the right to change its Policy from time to time without notification to any parties concerned as circumstances may demand. For ease of reading, some of the provisions of the Ordinance have been summarized or paraphrased in this Complaint Handling Policy. For the precise wording of those provisions, please refer to the Ordinance.

Back to top