PCPD - Code of Practice on the Identity Card Number and other Personal Identifiers 7

The Ordinance
Code of Practice on the Identity Card Number and other Personal Identifiers

The following paragraph seeks to give practical effect to the Personal Data Accuracy Principle (Data Protection Principle 2(1)):

2.4

A data user should not collect from an individual his identity card number except by:

2.4.1	means of the physical production of the identity card in person by the individual

2.4.2	accepting the number as shown on a copy of the identity card which the individual chooses to provide rather than present his identity card in person;

Note:	A data user is, however, not obliged to accept an ID card number so provided by an individual. Furthermore, where a data user has a general policy of accepting copies of identity cards provided by individuals pursuant to this paragraph, the requirements of paragraph 3.7 should be complied with.

	or

2.4.3	first accepting the number as furnished, and later checking its accuracy and authenticity by means of the physical production of the identity card in person by the holder, or if that is not reasonably practicable, by means of a copy of the identity card provided by the holder, before the number is used for any purpose.

Note:	For example, in the case of an application for a vacancy in the civil service, the ID card number of the applicant as shown on the application form should not be used for integrity checking until it has been verified by examination against the ID card produced by the applicant at a subsequent occasion.