Response to data loss incidents by The Hongkong and Shanghai Banking Corporation Limited ("HSBC")

1.    In response to HSBC's loss of an audiotape containing 25,000 recorded phone conversations, the Privacy Commissioner for Personal Data, Mr. Roderick B Woo, issued the following statement.

2.    Mr. Woo said: “HSBC informed my Office in writing yesterday afternoon (3 July 2008) of the incident.  Apparently the lost tape is a backup tape digitally recorded and encoded using a proprietary format.”

3.    “I am very concerned about this incident as it is the second data loss by HSBC within two months.” Mr. Woo said.

4.    “I have directed a senior officer to follow up the matter.  At present I am not in a position to express any opinion on whether HSBC had contravened the Personal Data (Privacy) Ordinance (the “Ordinance”) as my officer has just begun collating the relevant facts and circumstances of the case.  Once an investigation is on course, all my prescribed officers and I have to observe confidentiality under section 46 of the Ordinance.” said Mr. Woo.

5.    Concerning the previous loss of a server storing customers’ personal data relating to 159,000 HSBC accounts, Mr. Woo said he has formed certain preliminary views and a separate announcement would be made upon the conclusion of his enquiries/investigation.